Hello,

CAS 7.2, delegated AuthN with SAML. In CAS screen where you enter username 
in order for CAS to locate the external IdP, the business problem I deal 
with is that the username in CAS is Different from that is in External 
IdP.  For instance, I may enter username: johnsmith in CAS, it goes to 
Okta, but in Okta, user may enter their Okta username: jsmith. When SAML 
response comes back to CAS, I want CAS create a principal with the CAS 
username johnsmith (Not jsmith as Okta says), and with attributes from Okta 
jsmith user.  There is one level of indirection here.

How and where do I store the CAS username before CAS delegates to external 
Idp, and match it with response later on?  The outbound delegation and 
inbound response are two different requests.

thx!

-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/fc344419-f41a-4b54-8ed9-84cc3e6649e0n%40apereo.org.

Reply via email to