We are working towards this as well but do not have it in place yet. I
think it will be a two step process. Inside the
C:\etc\cas\config\cas.properties files in the LDAP section you need to
tell it what attributes from LDAP you want to pull....
cas.authn.ldap[0].principalAttributeList=sn,cn,mail,displayname,givenName,sAMAccountName,employeeType,*employeeNumber*
Then, inside the .json file that denotes the service entry for Self
Service Banner you would map the employeeNumber LDAP attribute to
UDC_IDENTIFIER for when you send the info out.... here is (what I
believe to be) a valid .json file, in our case located in
C:\etc\cas\services\service_entry_4_475674893038.json with the
UDC_IDENTIFIER line bolded
{
"@class" : "org.apereo.cas.services.RegexRegisteredService",
"serviceId" : "https://bss.wheatonma.edu/.*";,
"name" : "BannerSelfService",
"id" : 475674893038,
"description" : "Service entry to Banner SSO",
"attributeReleasePolicy" : {
"@class" :
"org.apereo.cas.services.ReturnMappedAttributeReleasePolicy",
"allowedAttributes" : {
"@class" : "java.util.TreeMap",
"sn" : "sn",
"cn" : "cn",
"mail" : "EmailAddress",
"displayname" : "FullName"
*"employeeNumber" : "UDC_IDENTIFIER"*
"employeeType" : "affiliation"
}
},
"evaluationOrder" : 6
}
On 9/26/2017 8:46 AM, charlie derr wrote:
Greetings,
We are new to CAS, but have managed to successfully get 5.1 working
with our LDAP directory on the back end. Apologies if this is a FAQ, but
I've looked around the web for the answer and only found instructions on
how to do this with 4.x (and earlier) CAS installs.
We have a need to expose the LDAP attribute employeeNumber (it's
present directly on each user's entry) as UDC_IDENTIFIER to the
application using CAS (Self-Service Banner). Any pointers or links to
documentation on how to correctly and securely accomplish this will very
much be appreciated.
thanks ever so much,
~c
--
Charlie Derr
Director of Instructional Technology
Bard College at Simon's Rock
413-528-7344
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b2775040-27cb-11c6-4b64-d16f14581a2e%40wheatoncollege.edu.
