You have a proxy granting ticket problem that I don't believe is related to attribute release:
> [8/17/10 2:09:36:987 EDT] 00000026 SystemOut O 2010-08-17 02:09:36,987 DEBUG > [org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler] > - <Authentication failed because url was not secure.> > > [8/17/10 2:09:36:987 EDT] 00000026 SystemOut O 2010-08-17 02:09:36,987 INFO > [org.jasig.cas.authentication.AuthenticationManagerImpl] - > <AuthenticationHandler: > org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler > failed to authenticate the user which provided the following credentials: > [callbackUrl: http://localhost/secure/receptor]> Your test page shows you don't have a proxy ticket. It's important to note that proxy tickets and attribute release are mutually exclusive. The SAML protocol is used to release attributes to clients, but SAML 1.1 has no notion of anything like CAS 2.0 protocol proxy. Have you configured your client for SAML, https://wiki.jasig.org/display/CASC/JASIG+Client+SAML+Saml11TicketValidationFilter+Example? M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
