Attributes not being received by CAS client
McLennan, Neil R
n.mclennan at imperial.ac.uk
Fri May 13 11:16:37 UTC 2022
I am having major problems with Shibboleth outputting attributes to CAS. Some attributes are being output but some are not.
It was working fine a few weeks ago, but not sure what has changed. What might determine which attributes end up being output?
The logs show the following
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'sn' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'department' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'email' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'title' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'commonName' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'eduPersonTargetedID.old' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonAffiliation' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'eduPersonPrincipalName' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonEntitlement' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonScopedAffiliation' remained after filtering
Attribute filtering engine 'ShibbolethAttributeFilter': 422 values for attribute 'memberOfAll' remained after filtering
However only title, commonName , eduPersonTargetedID.old , eduPersonEntitlement, eduPersonAffiliation, eduPersonPrincipalName, memberOfAll are being received by the CAS Client even though they do not have
The following are not being received givenName, sn, email, department, email
An example of the transcoders
<bean parent="shibboleth.TranscodingProperties">
<property name="properties">
<props merge="true">
<prop key="id">title</prop>
<prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
<prop key="saml2.name">urn:oid:2.5.4.12</prop>
<prop key="saml1.name">urn:mace:dir:attribute-def:title</prop>
<prop key="displayName.en">Title</prop>
<prop key="displayName.de">Titel</prop>
<prop key="displayName.fr">Title</prop>
<prop key="displayName.ja">肩書き</prop>
<prop key="description.en">Title of a person</prop>
<prop key="description.de">Titel der Person</prop>
<prop key="description.fr">Titre de la personne</prop>
<prop key="description.ja">利用者の肩書き</prop>
</props>
</property>
</bean>
<bean parent="shibboleth.TranscodingProperties">
<property name="properties">
<props merge="true">
<prop key="id">department</prop>
<prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
<prop key="saml2.name">urn:mace:dir:attribute-def:department</prop>
<prop key="saml1.name">urn:mace:dir:attribute-def:department</prop>
<prop key="displayName.en">department</prop>
<prop key="description.en">department</prop>
</props>
</property>
</bean>
More information about the users
mailing list