<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<div id="mail-editor-reference-message-container">
<div>
<div>
<div>
<p class="MsoNormal">I have added CAS to IdP version 5.1.3. and I am attempting to pass an attribute , uid, to the CAS service.
<o:p></o:p></p>
<p class="MsoNormal">I can authenticate and I see that the service ticket is granted.
<o:p></o:p></p>
<p class="MsoNormal">But, the uid is not passed. Below are the config settings and the log message.<o:p></o:p></p>
<p class="MsoNormal">Can you tell me what I am missing or point me to the appropriate docs?<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b>attribute-filter.xml:</b><o:p></o:p></p>
<p class="MsoNormal"> <AttributeFilterPolicy id="JasperServices"><o:p></o:p></p>
<p class="MsoNormal"> <PolicyRequirementRule xsi:type="RequesterRegex"<o:p></o:p></p>
<p class="MsoNormal"> regex="https:\/\/(jasper(.*)?\.)emory\.edu\/jasperserver\-pro(.*)" /><o:p></o:p></p>
<p class="MsoNormal"> <AttributeRule attributeID="uid"><o:p></o:p></p>
<p class="MsoNormal"> <PermitValueRule xsi:type="ANY"/><o:p></o:p></p>
<p class="MsoNormal"> </AttributeRule><o:p></o:p></p>
<p class="MsoNormal"> </AttributeFilterPolicy><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b>cas-protocol.xml:</b><o:p></o:p></p>
<p class="MsoNormal"> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition"<o:p></o:p></p>
<p class="MsoNormal"> c:regex="https:\/\/(jasper(.*)?\.)emory\.edu\/jasperserver\-pro(.*)?"<o:p></o:p></p>
<p class="MsoNormal"> p:group="JasperCASServices"<o:p></o:p></p>
<p class="MsoNormal"> p:authorizedToProxy="true"<o:p></o:p></p>
<p class="MsoNormal"> p:singleLogoutParticipant="true" /><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b> </b><o:p></o:p></p>
<p class="MsoNormal"><b>From IdP logs:</b><o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:40:57,683|A86ADA1C7013233E53E92D4C2EC8FC2F| - WARN [DEPRECATED:130] - Java class 'net.shibboleth.idp.profile.context.RelyingPartyContext': This will be removed in the next major version of this software; replacement
is net.shibboleth.profile.context.RelyingPartyContext<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:01,178|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [org.ldaptive.auth.Authenticator:372] - Authentication succeeded for dn: CN=ghall4,OU=People,DC=emory,DC=edu<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:01,179|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.authn.impl.LDAPCredentialValidator:176] - Credential Validator ldap: Login by 'ghall4' succeeded<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:01,271|A86ADA1C7013233E53E92D4C2EC8FC2F| - WARN [DEPRECATED:130] - Java class 'net.shibboleth.idp.profile.context.RelyingPartyContext': This will be removed in the next major version of this software; replacement
is net.shibboleth.profile.context.RelyingPartyContext<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:01,965|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController:147] - Starting Duo 2FA for client 'DITUYZ5TWMIN157RPMKM', user 'ghall4', and unique request state
'eed6c99360eebf74abe73bb8a14aecf0'<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:03,356|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController:219] - Finished Duo 2FA for client 'DITUYZ5TWMIN157RPMKM', user 'ghall4', and unique request state
'eed6c99360eebf74abe73bb8a14aecf0'<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:03,802|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult:225] - Profile Action ValidateDuoTokenAuthenticationResult: Duo 2FA authentication
succeeded for 'ghall4', using second-factor 'remembered_device'<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:03,806|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.authn.impl.FinalizeAuthentication:201] - Profile Action FinalizeAuthentication: Principal ghall4 authenticated<o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:04,366|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.cas.flow.impl.GrantServiceTicketAction:242] - Profile Action GrantServiceTicketAction: Granted service ticket for
<a href="https://jasper.emory.edu/jasperserver-pro/j_spring_security_check">https://jasper.emory.edu/jasperserver-pro/j_spring_security_check</a><o:p></o:p></p>
<p class="MsoNormal">127.0.0.1|2024-11-26 07:41:04,555|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [Shibboleth-Audit.SSO:333] - 127.0.0.1|2024-11-26T12:40:56.283537699Z|2024-11-26T12:41:04.554989150Z|ghall4|https://jasper.emory.edu/jasperserver-pro/j_spring_security_check|ST-AADXGZLDOJSXIMNPN7R4O5HXPJUCJ6DENMW2PTCEZC7HG5XKNM2MMWLNTD36QLPHX2NQTJMDSILVWY5YSL62SR42RTDWGM7E4AY3POCMR3JDYQ6KOEJFHRKQSF4IVWJXM5EOENV5RCZRXGALQWYSC7MJBHMPVZ7ALJJIOJWVDXLVXVWXEP3CCSZT7HX5J44JU4NYOZTOMU5NJZ4OMVNCFAIQJQGKQOH43BJLLGFNG45OKI5TS6W6ZGUX6UIR57GVOK6DCJRCIUCXCVMTNZF6DXACC7CBPG6SJVPZWKFZO7REW5FM446SKGQKIEAFTN2VJA4H3E4FJL5C2O3JSDYFDUA46MJ7AN553WYUEEUSTU2ECRIVIT35IGMIYAAWNS7N3MUW37KKHMOIEZANZJEZSQEA6DKMXSEU||||ghall4||false|||||NoSaveNeeded|||c49b8ec4b43f2380e2e06252ed887adb9f7d939a69314f37997c57ce3d0254fe|Mozilla/5.0
(X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>