Hello,

i would like to add some attributes to the ID token, but i am already lost
at mapping those.
I have two auth sources, one ldap and one jdbc.

I would like to have
uid
preferred_username -> email
name
email
mail
id
in the token.

I have these in the config.

cas.properties:
cas.authn.ldap[0].principalAttributeList=uid,mail:email,mail,uidNumber:id,cn:displayName
cas.authn.jdbc.query[0].principalAttributeList=uid,email,mail,diplayName

cas.authn.attributeRepository.attributes.uid=uid
cas.authn.attributeRepository.attributes.displayName=displayName
cas.authn.attributeRepository.attributes.mail=mail
cas.authn.attributeRepository.attributes.email=email
cas.authn.attributeRepository.attributes.preferred_username=email
cas.authn.attributeRepository.attributes.id=id

cas.authn.attributeRepository.merger=ADD

cas.authn.attributeRepository.defaultAttributesToRelease=email,mail,uid,id,displayName

cas.authn.oidc.scopes=openid,profile,email,address,phone,offline_access,testScope
cas.authn.oidc.userDefinedScopes.testScope=preferred_username,name,email,mail,uid,id

cas.authn.oidc.claimsMap.preferred_username=email
cas.authn.oidc.claimsMap.name=displayName
cas.authn.oidc.claimsMap.id=id


service.json:
"scopes": [ "java.util.HashSet", [ "openid", "testScope"]]


In the end i get a preferred_username in the IDtoken, but even that is
wrong.




--
*Sándor Juhász*
System Administrator
*ChemAxon* *Ltd*.
Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031
Cell: +36704258964

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD65aPXnDgzxSesn5eUvLe-8buJ8CZhsWnRjRwa%2B3LgeSDNN%2Bw%40mail.gmail.com.

Reply via email to