Attributes not being received by CAS client

[Tom Zeller]

As a first step in troubleshooting, see if AACLI returns the expected attributes.

Tom

> On May 13, 2022, at 6:16 AM, McLennan, Neil R via users <users at shibboleth.net> wrote:
> 
> I am having major problems with Shibboleth outputting attributes to CAS. Some attributes are being output but some are not.
> It was working fine a few weeks ago, but not sure what has changed. What might determine which attributes end up being output?
> 
> The logs show the following
> 
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'givenName' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'sn' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'department' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'email' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'title' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'commonName' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'eduPersonTargetedID.old' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonAffiliation' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for attribute 'eduPersonPrincipalName' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonEntitlement' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 2 values for attribute 'eduPersonScopedAffiliation' remained after filtering
> Attribute filtering engine 'ShibbolethAttributeFilter': 422 values for attribute 'memberOfAll' remained after filtering
> 
> However only title, commonName , eduPersonTargetedID.old , eduPersonEntitlement, eduPersonAffiliation, eduPersonPrincipalName, memberOfAll are being received by the CAS Client even though they do not have 
> The following are not being received givenName, sn, email, department, email
> 
> An example of the transcoders
> 
>       <bean parent="shibboleth.TranscodingProperties">
>            <property name="properties">
>                <props merge="true">
>                    <prop key="id">title</prop>
>                    <prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
>                    <prop key="saml2.name">urn:oid:2.5.4.12</prop>
>                    <prop key="saml1.name">urn:mace:dir:attribute-def:title</prop>
>                    <prop key="displayName.en">Title</prop>
>                    <prop key="displayName.de">Titel</prop>
>                    <prop key="displayName.fr">Title</prop>
>                    <prop key="displayName.ja">肩書き</prop>
>                    <prop key="description.en">Title of a person</prop>
>                    <prop key="description.de">Titel der Person</prop>
>                    <prop key="description.fr">Titre de la personne</prop>
>                    <prop key="description.ja">利用者の肩書き</prop>
>                </props>
>            </property>
>        </bean>
> 
>    <bean parent="shibboleth.TranscodingProperties">
>            <property name="properties">
>                <props merge="true">
>                    <prop key="id">department</prop>
>                    <prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
>                    <prop key="saml2.name">urn:mace:dir:attribute-def:department</prop>
>                    <prop key="saml1.name">urn:mace:dir:attribute-def:department</prop>
>                    <prop key="displayName.en">department</prop>
>                    <prop key="description.en">department</prop>
>                </props>
>        </property>
>        </bean>
> -- 
> For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net