Thanks Greg. I've got all the following attributes listed in by cas.properties. When I look in /cas/status/ssosessions I see all of these attributes in the TGT. That's why I was thinking it must be something to do with the way the attributes are released in the service definition.
cas.authn.attributeRepository.ldap[0].attributes.cn: cn cas.authn.attributeRepository.ldap[0].attributes.displayName: displayName cas.authn.attributeRepository.ldap[0].attributes.givenName: givenName cas.authn.attributeRepository.ldap[0].attributes.mail: mail cas.authn.attributeRepository.ldap[0].attributes.sn: sn cas.authn.attributeRepository.ldap[0].attributes.udcid: UDC_IDENTIFIER cas.authn.attributeRepository.ldap[0].attributes.uid: uid On Wednesday, February 21, 2018 at 5:50:36 PM UTC-7, Greg Booth wrote: > > Specifically, in cas.properties: > > cas.authn.attributeRepository.ldap[0].attributes.udcid=UDC_IDENTIFIER > > > On Wed, Feb 21, 2018 at 7:48 PM, Greg Booth <[email protected] <javascript:>> > wrote: > >> We also had to map UDC_IDENTIFIER to get it to work, although we are on >> CAS 5.1.5. >> >> On Wed, Feb 21, 2018 at 7:18 PM, Travis Schmidt <[email protected] >> <javascript:>> wrote: >> >>> I am helping a team with this exact issue right now. Don't know >>> anything about the banner side of things, but I had to map the attribute >>> they were looking for to UDC_IDENTIFIER in the Service Registry for it to >>> work. >>> >>> On Wed, Feb 21, 2018 at 3:46 PM Matthew Uribe <[email protected] >>> <javascript:>> wrote: >>> >>>> Hello Community, >>>> >>>> I am wondering whether anyone has had success with Banner 9 and CAS >>>> 5.2.x >>>> >>>> We have been using the Luminis delivered CAS 3.5.2, but are interested >>>> in the features available in 5, such as SAML2 IdP, and MFA using Duo. I >>>> have deployed CAS 5.2.0, included cas-server-support-ldap and >>>> cas-server-support-saml >>>> dependencies, and setup a service for one of our Banner 9 apps, but >>>> haven't >>>> been able to successfully access the application. I can access the CAS >>>> Dashboard, as well as the CAS-Management webapp, but the Banner apps are >>>> beyond me at this point. Right now, when I navigate to the Banner 9 app, I >>>> am redirected to the CAS login page. After logging in successfully, the >>>> browser gives me an error: "HTTP Status 403 - No assertions found". >>>> >>>> I figure the problem is either in my service registry, or that I maybe >>>> need to import the CAS certificate into a keystore somewhere on the Banner >>>> 9 server. Since I don't see anything related to a cert import in the >>>> Banner >>>> 9 install guides, I'm focused on the first of these two possibilities, but >>>> after 2 days of going in circles I've run out of ideas and would eagerly >>>> accept the advice of this community. >>>> >>>> Thank you, >>>> Matt >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected] <javascript:>. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/56930314-153c-4426-8eda-3f9bb5596089%40apereo.org >>>> >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/56930314-153c-4426-8eda-3f9bb5596089%40apereo.org?utm_medium=email&utm_source=footer> >>>> . >>>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected] <javascript:>. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAC_RtEasSNK33m-WXAVmDYsQKX3CFDrV4kEesKkgrecBx01Nqw%40mail.gmail.com >>> >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAC_RtEasSNK33m-WXAVmDYsQKX3CFDrV4kEesKkgrecBx01Nqw%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >> >> >> >> -- >> Gregory Booth >> Senior Systems Administrator & Technical Team Lead >> IT Operations >> Information Technology >> Michigan Technological University >> (906) 487-1797 >> www.mtu.edu >> www.it.mtu.edu >> > > > > -- > Gregory Booth > Senior Systems Administrator & Technical Team Lead > IT Operations > Information Technology > Michigan Technological University > (906) 487-1797 > www.mtu.edu > www.it.mtu.edu > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/5cab67da-5197-471d-9dfe-ea3a1466c615%40apereo.org.
