On Thu, Feb 22, 2018 at 06:04PM -0500, Dawid Hawes wrote: >> for authorization control, without having access to a samlValidate url >> option? For example, we would like to instruct Apache to limit access >> to those users who have "Staff" in the the "<campusstatus>" element. > >mod_auth_cas supports SAML attributes with /samlValidate and CASv2 >attributes with /serviceValidate (note that you must use git master >for this support). > >The payload above does not look like what I would expect, which is >outlined here: > >https://apereo.github.io/cas/5.1.x/protocol/CAS-Protocol-Specification.html#255-attributes-cas-30 > >It will not be parsed correctly and you will not be able to use >those >values for authorization without modifying mod_auth_cas. >/serviceValidate in mod_auth_cas expects <cas:attributes/>.
Thanks for the reply, David. This makes perfect sense to me. If we want to pursue this further, we will use git master and modify the code. Thanks! Bryan -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/20180226142758.ery5tbuspl3xodhx%40iridonia.inside.leepfrog.com.
