Did you configure the server to support releasing attributes with SAML 1.1?
The CAS protocol didn't support attribute release until v3.0 of the
protocol, which came out in v4.0 of the server.
To support SAML 1.1 attribute release, you need this in pom.xml:
<dependency>
<groupId>org.apereo.cas</groupId>
<artifactId>cas-server-support-saml</artifactId>
<version>${cas.version}</version>
</dependency>
If you'd like a complete working example, you can see here (and the
surrounding sections):
https://dacurry-tns.github.io/deploying-apereo-cas/building_server_ldap_resolution-release_overview.html
--Dave
--
DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY
71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • [email protected]
[image: The New School]
On Tue, Sep 19, 2017 at 7:24 AM, Jérémie Pilette <[email protected]>
wrote:
> Thank you for your responses.
>
> I have used json configuration "attributeReleasePolicy" but no attributes
> are sent to the service.
> Is there a parameter to add in the cas.properties?
>
> In the "Attribute Release Policies", it is written that it is about
> principal attributes. Where can we defined the principal Attributes ?
>
> I have to forget something .... but what ?
>
> Thank you,
>
> Jérémie
>
>
> Le vendredi 15 septembre 2017 17:51:05 UTC+2, rbon a écrit :
>
>> Jérémie
>>
>> You can specify the attributes to be released on a per service basis. Add
>> something like this to you service definition:
>>
>> "attributeReleasePolicy" : { "@class" :
>> "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy" ,
>> "allowedAttributes"
>> : { "@class" : "java.util.TreeMap", "uvi
>> cEduPersonNetLinkContactUpdateTimestamp" : "contactUpdateTimestamp",
>> "uvicEduPersonSpridenID"
>> : "UDC_IDENTIFIER" } }
>>
>> This way you can set the identifier name to be service specific and leave
>> the ldap identifiers in their raw format.
>> See https://apereo.github.io/cas/5.1.x/integration/Attribute
>> -Release-Policies.html
>>
>> Ray
>>
>> On Fri, 2017-09-15 at 06:42 -0700, Jérémie Pilette wrote:
>>
>> Is there somebody who can help me please ?
>>
>> Thank you,
>>
>> Jérémie
>>
>> Le jeudi 7 septembre 2017 15:50:52 UTC+2, Jérémie Pilette a écrit :
>>
>> Hello,
>>
>> I would like to configure my cas.properties in order to have the
>> possibility to transfert some values from LDAP to a service (Ypareo for
>> example)
>>
>> Do you know how to do that ?
>>
>> Must I use these parameters :
>>
>> # cas.authn.ldap[0].principalAttributeId=uid
>> # cas.authn.ldap[0].principalAttributePassword=password
>> #
>> cas.authn.ldap[0].principalAttributeList=sn,cn:commonName,givenName,eduPersonTargettedId:SOME_IDENTIFIER
>>
>>
>> or these parameters :
>> # cas.authn.attributeRepository.ldap[0].attributes.uid=uid
>> # cas.authn.attributeRepository.ldap[0].attributes.displayName=displayName
>> # cas.authn.attributeRepository.ldap[0].attributes.cn=commonName
>> #
>> cas.authn.attributeRepository.ldap[0].attributes.affiliation=groupMembership
>>
>>
>> Thanks a lot,
>>
>> Jérémie
>>
>>
>> --
>> Ray Bon
>> Programmer analyst
>> Development Services, University Systems
>> 2507218831 | CLE 019 | [email protected]
>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit https://groups.google.com/a/
> apereo.org/d/msgid/cas-user/5e57990d-248a-4df8-891f-
> 05906ad12217%40apereo.org
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/5e57990d-248a-4df8-891f-05906ad12217%40apereo.org?utm_medium=email&utm_source=footer>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPJwzS%2BbNpLwpR2n4FpRogk6vdqZLukeHu4rwLVFr6cBw%40mail.gmail.com.
