<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">That's one way, but as the IdP wiki documentation states:<div class=""><br class=""></div><div class=""> <a href="https://wiki.shibboleth.net/confluence/display/IDP30/CasProtocolConfiguration" class="">https://wiki.shibboleth.net/confluence/display/IDP30/CasProtocolConfiguration</a></div><div class=""><br class=""></div><div class=""> "Notable features:</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>• The XML response delivered by the /serviceValidate URI includes the <cas:attributes> extension supported by most CAS clients."</div><div class=""><br class=""></div><div class="">An extension to the original CAS 2 protocol, that was codified with CAS Protocol v3</div><div class=""><br class=""></div><div class=""> <a href="https://apereo.github.io/cas/5.1.x/protocol/CAS-Protocol-Specification.html" class="">https://apereo.github.io/cas/5.1.x/protocol/CAS-Protocol-Specification.html</a></div><div class=""><br class=""></div><div class="">So you can get attributes sent with either /samlValidate or /serviceValidate. You control it with the filter file, I find it easiest to use a Group name reference in the release rules that ties to the group name used in the cas-protocol.xml file.</div><div class=""><br class=""></div><div class="">The other thing to be aware of is that the "name" of the attribute will be the ID for its definition, not the attribute encoder name. At least for /serviceValidate (I haven't used the /samlValidate endpoint.)</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Apr 22, 2019, at 12:39 PM, Cantor, Scott <<a href="mailto:cantor.2@OSU.EDU" class="">cantor.2@OSU.EDU</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 4/22/19, 1:35 PM, "users on behalf of Liam Hoekenga" <<a href="mailto:users-bounces@shibboleth.net" class="">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:liamr@umich.edu" class="">liamr@umich.edu</a>> wrote:<br class=""><br class=""><blockquote type="cite" class="">It'd use SAML 1 attribute encoding then? <br class=""></blockquote><br class="">I believe so.<br class=""><br class="">-- Scott<br class=""><br class=""><br class=""><br class=""><br class="">-- <br class="">For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" class="">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class=""><br class="">----------<br class=""><br class="">This email has been scanned for spam and viruses by Proofpoint Essentials. Visit the following link to report this email as spam:<br class=""><a href="https://us2.proofpointessentials.com/index01.php?mod_id=11&mod_option=logitem&mail_id=1555954791-fui4qoj1X-QJ&r_address=mgrady%40unicon.net&report=1" class="">https://us2.proofpointessentials.com/index01.php?mod_id=11&mod_option=logitem&mail_id=1555954791-fui4qoj1X-QJ&r_address=mgrady%40unicon.net&report=1</a><br class=""></div></div></blockquote></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></div></body></html>