Leaving this here in case it helps. If I am incorrect, let me know.

I could not get a 1:* mapping of ldap attributes to work in CAS 5.0.1. I 
have an internal identifier 'uid' in ldap that needs to be released as both 
'uid' and 'UDC_IDENTIFIER'. I am only able to get cas to release 1:1, the 
last one mapped in cas.properties. To solve I overrode 
templates/protocol/3.0/casServiceValidationSuccess.html to statically 
output a duplicate attribute with tag name replaced when UDC_IDENTIFIER is 
hit.

changed
        <cas:attributes th:if="${not #lists.isEmpty(formattedAttributes)}">
            <div th:each="attr : ${formattedAttributes}" th:remove="tag">
                <div th:utext="${attr}" th:remove="tag"/>
            </div>
        </cas:attributes>


to
        <cas:attributes th:if="${not #lists.isEmpty(formattedAttributes)}">
            <div th:each="attr : ${formattedAttributes}" th:remove="tag">
                <div th:utext="${attr}" th:remove="tag"/>
                <div th:if="${#strings.contains(attr, 'UDC_IDENTIFIER')}" 
th:remove="tag">
                    <span th:utext="${#strings.contains(attr, 
'UDC_IDENTIFIER')} ? ${#strings.replace(attr, 'UDC_IDENTIFIER', 'uid')} : 
${attr}" th:remove="tag"/>
                </div>
            </div>
        </cas:attributes>



-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/41c3568a-6df7-4b41-8505-ea3a0f0474da%40apereo.org.

Reply via email to