CAS Encoded Ticket & CAS User

[Ryan Rumbaugh]

Hello,

We’re working on changing the attribute used for canonicalization and one issue we found is the encodedTicket sent to CAS services doesn’t respect the relying party configuration:

<bean parent="CAS.ValidateConfiguration" p:userAttribute="uid" />

When making the above change I have verified the <cas:user> is indeed the correct attribute (uid). However, the CAS service I’m testing with displays a message that my ID is not found because, presumably, the encoded ticket is using the attribute configured for canonicalization, not userAttribute.

Does anyone have some suggestions or advice on how to configure what attribute is included in the encodedTicket? Thanks!

--
Ryan Rumbaugh

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190118/8b21ab01/attachment.html>