Thank you all for this helpful thread. I am trying to set up CAS in a similar way so that we can return basic user attributes (such as display name, email, etc) in the validation-success response. The documentation on how one might do this is sparse, to say the least.
Julien, Would you be able to provide the jsp and phpCAS changes you made to set up your system or a link to more info if you have already posted them? Thanks for your help, - Adam On Wed, Mar 11, 2009 at 9:42 AM, Julien Gribonvald < [email protected]> wrote: > I already made a request for a standard as there isn't standard defined to > obtain users attributes on the cas ticket. > > The cas ticket give only the identifiant of the user by default... If you > want to provide attributes in the ticket you need to modify > casServiceValidationSuccess.jsp. > > On our side we use your 3rd option : > > <cas:attribute name="attr.key" value="attr.value"/> > > We also modified phpCAS for this kind of ticket... > > But an other solution to avoid problems of non standard is to use the > samlValidate if you can... > > Normaly if i'm not wrong next CAS version (CAS v4) should integrate SAML > 2.0 so this will solve the problem. But we will need to modify applications > to be able to read SAML... > > - Julien. > > > Aaron Shettleroe a écrit : > > According to the link you provided attributes appear like: >> ... >> <cas:attributes> >> <cas:attribute> >> <cas:name>${fn:escapeXml(attr.key)}</cas:name> >> <cas:value>${fn:escapeXml(attr.value)}</cas:value> >> </cas:attribute> >> </cas:attributes> >> ... >> >> However, that is not how the Java JA-SIG CAS 3.1.3 client parses them. It >> expects them in the form of: >> <cas:attributes> >> <cas:{attr.key}>attr.value</cas:{attr.key}> >> </cas:attributes> >> >> I've also seen: >> <cas:attribute name="attr.key" value="attr.value"/> >> >> Is there even a standard? According to the link CAS doesn't provide >> putting the attributes in the response found in >> casServiceValidationSuccess.jsp. What gives? >> >> > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
