Your best option is with SAML. I am going paste some xml script to show
how to set it up (You need some basic CAS configuration knowledge to
understand these steps):
-- Server ----
Step 1: CAS Server: Add/Set all you attributes (Email, Name etc) in
CredentialsToPrincipalResolver implementation
--- Client ----
Step 2: Client: Add these dependency in your maven (if you not using
maven then add these jar files)
<!-- CAS Repository Begin -->
<dependency>
<groupId>org.jasig.cas.client</groupId>
<artifactId>cas-client-core</artifactId>
<version>${cas.client.version}</version>
</dependency>
<dependency>
<groupId>org.apache.santuario</groupId>
<artifactId>xmlsec</artifactId>
<version>1.4.5</version>
</dependency>
<dependency>
<groupId>xerces</groupId>
<artifactId>xerces</artifactId>
<version>1.2.3</version>
</dependency>
<dependency>
<groupId>xml-security</groupId>
<artifactId>xml-security</artifactId>
<version>1.0.4</version>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-cas-client</artifactId>
<version>${spring.version}</version>
</dependency>
<dependency>
<groupId>opensaml</groupId>
<artifactId>opensaml</artifactId>
<version>1.1b</version>
</dependency>
<!-- CAS Repository End -->
Step 3: Client: Set this bean as your ticket validator
<bean
class="org.jasig.cas.client.validation.Saml11TicketValidator">
<constructor-arg index="0" value="${cas.server.url}" />
</bean>
Step 4: Client: Implements AuthenticationUserDetailsService and the
token will have all the attributes from CAS Server.
Hope that helps..
Thanks
Duke.
>>> "Thea" <[email protected]> 7/5/2011 5:45 AM >>>
Hello,
I try to estimate a project for a costumer to introduce CAS. It should
be possible to add some attributes like Nickname or E-Mail address to
the responds from the CAS back to the calling web site. I have heard I
have to use shibboleth for that. However I read about SAML 1.1 as
protocol for the CAS and as I understood it is possible to add
attributes with SAML. Is that correct? If not, what other possibilities
are there beside Shibboleth?
Thanks a lot
Thea
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
_____________
LEGAL NOTICE
Unless expressly stated otherwise, this message is confidential
and may be privileged. It is intended for the addressee(s) only.
Access to this E-mail by anyone else is unauthorized.
If you are not an addressee, any disclosure or copying of the
contents of this E-mail or any action taken (or not taken) in
reliance on it is unauthorized and may be unlawful. If you are not an
addressee, please inform the sender immediately, then delete this
message and empty from your trash.
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
