Hi all,

When releasing attributes to a SAML service, is there a way to change the 
Name field (in the resulting SAML response) to use the SAML 1 or 2 
definitions rather than the attribute name? That is, can the Name field be 
set to urn:oid:2.5.4.4 (<saml2:Attribute Name="urn:oid:2.5.4.4">) instead 
of sn (<saml2:Attribute Name="sn">)? The default Shibboleth Service 
Provider 2 attribute-map uses the urn:oid format, not the attribute name.

I've tried changing the attribute repository to map sn to the oid 
(cas.authn.attributeRepository.ldap[0].attributes.sn=urn:oid:2.5.4.4), but 
then the attribute doesn't get pulled in from ldap. The 
setting cas.authn.samlIdp.response.useAttributeFriendlyName=false just 
removes the FriendlyName field.

Thanks,

Mac Reid

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/10d6ca0d-342a-4a5f-9351-086bea3c18d0%40apereo.org.

Reply via email to