Thanks for your response.
sn and mail are attributes I extract from my LDAP. I use it with CAS
services and it works... I configured Oauth2.0 module too and I use and
map these attributes with success... So I think it's ok with these
attributes. It's only with OIDC services it doesn't work...
Best regards.
QLA.
Le 08/06/2020 à 18:01, Jérôme Steve a écrit :
Hi,
Your OIDC configuration look good.
You map your claims like this :
cas.authn.oidc.claimsMap.name <http://cas.authn.oidc.claimsMap.name>=sn
cas.authn.oidc.claimsMap.email=mail
Maibe you don't have sn and email in your attribute repository ?
Le lun. 8 juin 2020 à 16:37, qla3fa <[email protected]
<mailto:[email protected]>> a écrit :
Hi,
I try to configure OIDC with CAS 5.2. I added module
"cas-server-support-oidc" and the config with lines :
# Configuration OIDC
cas.authn.oidc.issuer=https://my-url.com/cas/oidc
cas.authn.oidc.skew=5
cas.authn.oidc.jwksFile=file:/etc/cas/keystore.jwks
cas.authn.oidc.jwksCacheInMinutes=60
cas.authn.oidc.dynamicClientRegistrationMode=PROTECTED
cas.authn.oidc.subjectTypes=public,pairwise
cas.authn.oidc.scopes=openid, profile, email
cas.authn.oidc.claims=sub,name,preferred_username,family_name,given_name,middle_name,given_name,profile,picture,nickname,website,zoneinfo,locale,updated_at,birthdate,email,email_verified,phone_number,phone_number_verified,address
cas.authn.oidc.claimsMap.given_name=givenName
cas.authn.oidc.claimsMap.name
<http://cas.authn.oidc.claimsMap.name>=sn
cas.authn.oidc.claimsMap.email=mail
For my App, I configure service :
{
"@class" : "org.apereo.cas.services.OidcRegisteredService",
"clientId": "applicationQLA-testPHP",
"clientSecret": "xxxxxxxxx",
"serviceId" : "^http://localhost:8080/.*";,
"bypassApprovalPrompt": true,
"supportedResponseTypes" : [ "java.util.HashSet", [ "code",
"token" ] ],
"name" : "applicationQLAtestPHP",
"scopes" : [ "java.util.HashSet",
[ "openid", "email", "profile" ]
],
"id" : 7,
"evaluationOrder" : 7,
}
Oidc authentication works good but in my application the only
attributes I can get are :
sub, auth_time, jti, iss, aud, exp, iat, nbf, amr, state, nonce,
at_hash, preferred_username
But I can't get the attributes of email or profile scope...
In logs file I don't have error messages.
What is wrong with my config ?
Thanks for help.
Best regards,
QLA
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected]
<mailto:[email protected]>.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/838f0180-1c48-a196-2672-0981d6d971fb%40gmail.com
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/838f0180-1c48-a196-2672-0981d6d971fb%40gmail.com?utm_medium=email&utm_source=footer>.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected]
<mailto:[email protected]>.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD6KnbwcvSbwj20pdAq46X7j1EGbAoOp7GH1fO1GcZuU_SqDbQ%40mail.gmail.com
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD6KnbwcvSbwj20pdAq46X7j1EGbAoOp7GH1fO1GcZuU_SqDbQ%40mail.gmail.com?utm_medium=email&utm_source=footer>.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/ba709981-8ac5-fd63-f3b5-c31ea85ce277%40gmail.com.
