Hi Andy,
I have tried that so only this in the JSON:
{
"@class" : "org.apereo.cas.support.saml.services.SamlRegisteredService",
"serviceId" : "SERVICE",
"name" : "Apache Secured By SAML",
"id" : 100000011,
"description" : "CAS development Apache mod_shib/shibd server with
username/password protection",
"metadataLocation" : "file:////etc/cas/saml/metadata/metadata.xml",
"encryptAssertions": "true",
"attributeReleasePolicy" : {
"@class" : "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
}
"evaluationOrder" : 1125
}
and still get:
credentialType credentialType UsernamePasswordCredential
samlAuthenticationStatementAuthMethod samlAuthenticationStatementAuthMethod
urn:oasis:names:tc:SAML:1.0:am:password
isFromNewLogin isFromNewLogin true
authenticationDate authenticationDate 2020-01-22T13:59:03.213799Z
urn:oid:0.9.2342.19200300.100.1.3 urn:oid:0.9.2342.19200300.100.1.3
[email protected]
authenticationMethod authenticationMethod LdapAuthenticationHandler
urn:oid:0.9.2342.19200300.100.1.1 urn:oid:0.9.2342.19200300.100.1.1 Username
successfulAuthenticationHandlers successfulAuthenticationHandlers
LdapAuthenticationHandler
longTermAuthenticationRequestTokenUsed
longTermAuthenticationRequestTokenUsed false
urn:oid:2.5.4.42 urn:oid:2.5.4.42 FirstName
urn:oid:2.5.4.4 urn:oid:2.5.4.4 Surname
I cannot seem to turn off the unwanted attributes :
credentialType, samlAuthenticationStatementAuthMethod, etc
and I cannot seem to add attributes - eduPersonEntitlement needs to
be urn:mace:dir:entitlement:common-lib-terms
Would I need to write a Groovy script to do that ?
Thanks
Jeff
On Thursday, 23 January 2020 09:51:14 UTC, Andy Ng wrote:
>
> Hi Jeff,
>
> Have you tried allow all and see if the issue is due to the allowAttribute
> or other matter?
>
> Setup allow all as such:
> https://apereo.github.io/cas/6.0.x/integration/Attribute-Release-Policies.html#return-all
>
> Cheers!
> - Andy
>
--
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/a2b2e4ad-6219-4927-835b-eaad74528e5f%40apereo.org.