Attributes not being received by CAS client

[McLennan, Neil R]

AACLI returns the correct values as I expected as it does SAML. With CAS I presume it converts SAML attributes into CASStringAttributeTranscoder attributes unless defined as CASScopedStringAttributeTranscoder

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Tom Zeller
Sent: 13 May 2022 13:43
To: Shib Users <users at shibboleth.net>
Subject: Re: Attributes not being received by CAS client

As a first step in troubleshooting, see if AACLI returns the expected attributes.

Tom

> On May 13, 2022, at 6:16 AM, McLennan, Neil R via users <users at shibboleth.net> wrote:
> 
> I am having major problems with Shibboleth outputting attributes to CAS. Some attributes are being output but some are not.
> It was working fine a few weeks ago, but not sure what has changed. What might determine which attributes end up being output?
> 
> The logs show the following
> 
> Attribute filtering engine 'ShibbolethAttributeFilter': 1 values for 
> attribute 'givenName' remained after filtering Attribute filtering 
> engine 'ShibbolethAttributeFilter': 1 values for attribute 'sn' 
> remained after filtering Attribute filtering engine 
> 'ShibbolethAttributeFilter': 1 values for attribute 'department' 
> remained after filtering Attribute filtering engine 
> 'ShibbolethAttributeFilter': 1 values for attribute 'email' remained 
> after filtering Attribute filtering engine 
> 'ShibbolethAttributeFilter': 1 values for attribute 'title' remained 
> after filtering Attribute filtering engine 
> 'ShibbolethAttributeFilter': 1 values for attribute 'commonName' 
> remained after filtering Attribute filtering engine 
> 'ShibbolethAttributeFilter': 1 values for attribute 
> 'eduPersonTargetedID.old' remained after filtering Attribute filtering 
> engine 'ShibbolethAttributeFilter': 2 values for attribute 
> 'eduPersonAffiliation' remained after filtering Attribute filtering 
> engine 'ShibbolethAttributeFilter': 1 values for attribute 
> 'eduPersonPrincipalName' remained after filtering Attribute filtering 
> engine 'ShibbolethAttributeFilter': 2 values for attribute 
> 'eduPersonEntitlement' remained after filtering Attribute filtering 
> engine 'ShibbolethAttributeFilter': 2 values for attribute 
> 'eduPersonScopedAffiliation' remained after filtering Attribute 
> filtering engine 'ShibbolethAttributeFilter': 422 values for attribute 
> 'memberOfAll' remained after filtering
> 
> However only title, commonName , eduPersonTargetedID.old , 
> eduPersonEntitlement, eduPersonAffiliation, eduPersonPrincipalName, 
> memberOfAll are being received by the CAS Client even though they do 
> not have The following are not being received givenName, sn, email, 
> department, email
> 
> An example of the transcoders
> 
>       <bean parent="shibboleth.TranscodingProperties">
>            <property name="properties">
>                <props merge="true">
>                    <prop key="id">title</prop>
>                    <prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
>                    <prop key="saml2.name">urn:oid:2.5.4.12</prop>
>                    <prop key="saml1.name">urn:mace:dir:attribute-def:title</prop>
>                    <prop key="displayName.en">Title</prop>
>                    <prop key="displayName.de">Titel</prop>
>                    <prop key="displayName.fr">Title</prop>
>                    <prop key="displayName.ja">肩書き</prop>
>                    <prop key="description.en">Title of a person</prop>
>                    <prop key="description.de">Titel der Person</prop>
>                    <prop key="description.fr">Titre de la personne</prop>
>                    <prop key="description.ja">利用者の肩書き</prop>
>                </props>
>            </property>
>        </bean>
> 
>    <bean parent="shibboleth.TranscodingProperties">
>            <property name="properties">
>                <props merge="true">
>                    <prop key="id">department</prop>
>                    <prop key="transcoder">SAML2StringTranscoder SAML1StringTranscoder</prop>
>                    <prop key="saml2.name">urn:mace:dir:attribute-def:department</prop>
>                    <prop key="saml1.name">urn:mace:dir:attribute-def:department</prop>
>                    <prop key="displayName.en">department</prop>
>                    <prop key="description.en">department</prop>
>                </props>
>        </property>
>        </bean>
> --
> For Consortium Member technical support, see 
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net