CAS attributes and upstream SAML authentication

[Cantor, Scott]

> And my guess is that this is what the CAS implementation 
> lacks, or that  I missed some configuration.

You nailed it.

There's no inherent issue with proxying anything to anything, and I assume you can tell if you're import of the SAML attributes worked, but even if it did, yes, you can't make the backchannel work.

We don't have support for encoding data into the CAS tickets and even if we did, it would make the tickets so long that some clients would break (possibly even more than with our normal sealed ticket approach).

You would have to build a stateful proxy, and we don't inherently support that. We don't prevent it, you could certainly write code to take the data and store it for use, or do something with the HTTPConnector in the resolver to write data somewhere else, but we don't do that now.

-- Scott