Attributes not being received by CAS client

McLennan, Neil R n.mclennan at imperial.ac.uk
Fri May 13 11:16:37 UTC 2022


I am having major problems with Shibboleth outputting attributes to CAS. Some attributes are being output but some are not.
It was working fine a few weeks ago, but not sure what has changed. What might determine which attributes end up being output?

The logs show the following

Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'sn' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'department' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'email' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'title' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'commonName' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'eduPersonTargetedID.old' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonAffiliation' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'eduPersonPrincipalName' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonEntitlement' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonScopedAffiliation' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 422 values for attribute 'memberOfAll' remained after filtering

However only title, commonName , eduPersonTargetedID.old , eduPersonEntitlement, eduPersonAffiliation, eduPersonPrincipalName, memberOfAll are being received by the CAS Client even though they do not have 
The following are not being received givenName, sn, email, department, email

An example of the transcoders

       <bean parent="shibboleth.TranscodingProperties">
            <property name="properties">
                <props merge="true">
                    <prop key="id">title</prop>
                    <prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
                    <prop key="saml2.name">urn:oid:2.5.4.12</prop>
                    <prop key="saml1.name">urn:mace:dir:attribute-def:title</prop>
                    <prop key="displayName.en">Title</prop>
                    <prop key="displayName.de">Titel</prop>
                    <prop key="displayName.fr">Title</prop>
                    <prop key="displayName.ja">肩書き</prop>
                    <prop key="description.en">Title of a person</prop>
                    <prop key="description.de">Titel der Person</prop>
                    <prop key="description.fr">Titre de la personne</prop>
                    <prop key="description.ja">利用者の肩書き</prop>
                </props>
            </property>
        </bean>

	<bean parent="shibboleth.TranscodingProperties">
            <property name="properties">
                <props merge="true">
                    <prop key="id">department</prop>
                    <prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
                    <prop key="saml2.name">urn:mace:dir:attribute-def:department</prop>
                    <prop key="saml1.name">urn:mace:dir:attribute-def:department</prop>
                    <prop key="displayName.en">department</prop>
                    <prop key="description.en">department</prop>
                </props>
		</property>
        </bean>


More information about the users mailing list