[cas-user] 2 "Username" Options and How it Works with Attributes

I have this requirement where we're supposed to allow users to sign-in with either an email address or a phone number. 1) Can I tailor CAS for either of those 2 options? 2) When it comes to attributes, how do I pair that user (because the user id is different) with the attributes clause? --

Re: [cas-user] User Attributes for SAML 2.0

That got it! Thank you so much, David! -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS

Re: [cas-user] User Attributes for SAML 2.0

My "username" column is called email, but even with your suggestions I still get the following DEBUG output in logs. Found [0] attributes for principal [jdgio...@gmail.com] from the attribute repository. This is why I think there something wrong with the query. Log level is set to debug, but

[cas-user] Re: Attribute Release on CAS Management Services: 5.2.4

Can you tell me how you got attributes working with JDBC? I'm having a hell of a time. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message

Re: [cas-user] User Attributes for SAML 2.0

Is there any way to show the sql used to get user attributes? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to

Re: [cas-user] User Attributes for SAML 2.0

Same error. Do you think that maybe my select statement is wrong? Specifically the `WHERE {0}` That just seems wrong to me. What is {0}? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions:

Re: [cas-user] User Attributes for SAML 2.0

cas.authn.accept.users= cas.authn.jdbc.query[0].ddlAuto=none cas.authn.jdbc.query[0].dialect=org.hibernate.dialect.MySQLDialect cas.authn.jdbc.query[0].driverClass=com.mysql.cj.jdbc.Driver cas.authn.jdbc.query[0].fieldPassword=password cas.authn.jdbc.query[0].password=

Re: [cas-user] User Attributes for SAML 2.0

The error I see on the CAS server is the following: 2018-05-21 20:15:07,348 INFO [org.apereo.cas.support.saml.web.idp.profile.sso.SSOSamlProfileCallbackHandlerController] - 2018-05-21 20:15:07,656 WARN [org.apereo.cas.services.ReturnMappedAttributeReleasePolicy] -

Re: [cas-user] User Attributes for SAML 2.0

David, I'm still trying to understand how user attributes are supposed to work. Let's say I'm using JDBC as my source for user data and credentials. If I'm writing the JSON service to map datasource fields to SAML attributes, how is this done? Is it naming convention? Do I need to include a

Re: [cas-user] User Attributes for SAML 2.0

I've had very little success making the management service work (like other things). I try to follow the documentation, but something is always amiss. My personal problem is that I'm very much a TDD developer. I have issues not being able to effectively test what I'm doing. -- - Website:

Re: [cas-user] User Attributes for SAML 2.0

Would this example you provided be applicable to a jdbc backend? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to

Re: [cas-user] User Attributes for SAML 2.0

Do you have an example of this? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS

[cas-user] User Attributes for SAML 2.0

How do I set up user attributes for SAML 2.0? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups

[cas-user] SAML Public Key for Metadata

For a IdP metadata file, what should the KeyDescriptor be? Is it the public key of the web server? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

We're the identify provider and the vendor is the service provider. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

Ok, this is just a guess here, but the vendor I'm trying to implement CAS SAML to is for Identity Provider. Is it possible we've got this confused, because our metadata.xml is setup for SPSSODescriptor. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

Is that attribute required? Right now it is static. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

I get the XML output as expected. https://vendor-site.com/Pages/Auth/Login.aspx;> https://vendor-site.com/Pages/Auth/Login.aspx; index="1" /> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

Looking at the logs more I did find these WARNs: 2018-05-08 17:02:31,227 WARN > [org.apereo.cas.support.saml.services.idp.metadata.SamlRegisteredServiceServiceProviderMetadataFacade] > > - https://vendor-site.com/Pages/Auth/Login.aspx] in > metadata provider Ensure the metadata is valid and

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

Thanks, David. Is the dashboard the management overlay? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

If I don't set this property does it affect the vendor integration I'm attempting to do? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

I noticed that my /cas/idp/metadata endpoint returns the following http://www.w3.org/2000/09/xmldsig#; xmlns:shibmd= "urn:mace:shibboleth:metadata:1.0" xmlns:xml= "http://www.w3.org/XML/1998/namespace; xmlns:mdui= "urn:oasis:names:tc:SAML:metadata:ui" entityID="https://cas.example.org/idp; >

Re: [cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

What I meant was that Matthew asked about my JSON using the @class org.apereo.cas.support.saml.services.SamlRegisteredService Then asked if I registered the IdP endpoint. From the tutorial he pointed me towards, I can't tell if I'm creating both a SamlRegisteredService and a

[cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

Are there 2 service JSON files I'm supposed to create? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the

[cas-user] Re: Working on Setting Up SAML 2.0 for the First Time

Yes, it is. { "@class": "org.apereo.cas.support.saml.services.SamlRegisteredService", "serviceId": "https://vendor-site.com/Pages/Auth/Login.aspx;, "name": "SAML Authentication Request", "id": 1003, "evaluationOrder": 1, "metadataLocation":

[cas-user] Working on Setting Up SAML 2.0 for the First Time

I'm not too familiar with SAML 2.0 and I need to set up our existing CAS (currently using CAS protocol). I've followed documentation, but unfortunately I'm unable to get the application to authorize. The error I get in logs is: CAS has found a match for service >

Re: [cas-user] Re: Grant Type password Not Working

Success! I removed the service in header property. Thanks, Riley. Tremendous help. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because

Re: [cas-user] Re: Grant Type password Not Working

Hmm... actually I see this in the log before an exception. Unauthorized Service Access. Service [oauthclient] is not found in service > registry. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions:

Re: [cas-user] Re: Grant Type password Not Working

Okay! Better! Now I get an invalid_grant in the response. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the

Re: [cas-user] Re: Grant Type password Not Working

It is almost like the /etc/cas/services is ignored. I only see 3 services registering and when I look in the tmp folder they are the ones that come with the dependencies. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines:

Re: [cas-user] Re: Grant Type password Not Working

I get this in logs and far as I know you and I are running the same exact implementation. 2018-05-04 14:38:44,332 WARN > [org.apereo.cas.services.RegisteredServiceAccessStrategyUtils] - > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List

[cas-user] Re: Grant Type password Not Working

You are correct, I committed some configs out of sync. I do apologize. Where you able to get the grant_type=password to work? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions:

Re: [cas-user] How Do I Debug CAS When Using Overlay?

This project has my code https://github.com/jdgiotta/cas-oauth-project I've already posted in another thread my problems with OAuth and the steps I took to make the above project run. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines:

Re: [cas-user] How Do I Debug CAS When Using Overlay?

I've solved zero issues with logs. I mostly get statements services not matching in registry. If service files aren't matching how do I determine what it is comparing against? Because I followed the documentation, service files are in the /etc/cas/services directory. -- - Website:

[cas-user] How Do I Debug CAS When Using Overlay?

I'm trying to solve what seems to be just unsolvable issues. How do I debug CAS if I'm using the overlay template? Is it better to not use the overlay in this case? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines:

[cas-user] Re: Grant Type password Not Working

I could really use some assistance with this. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups

[cas-user] Re: Grant Type password Not Working

Here is the project as is https://github.com/jdgiotta/cas-oauth-project I've gotten no where is solving my problem. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG ---

[cas-user] Re: Grant Type password Not Working

In my build.gradle in I'm adding the extra dependencies: compile "org.apereo.cas:cas-server-support-oauth-webflow:${project.'cas.version'}" compile "org.apereo.cas:cas-server-support-json-service-registry:${project.'cas.version'}" Then in the /etc/cas/services directory I have an

[cas-user] Grant Type password Not Working

When I attempt to perform a POST request to accessToken?grant_type=password the server does not recognize the service: 2018-05-02 10:09:31,679 WARN [org.apereo.cas.services.RegisteredServiceAccessStrategyUtils] - I'm not sure how to get the endpoint to properly responding. -- - Website:

[cas-user] Re: Basic Example of CAS of Overlay Implementing OAuth2.0

ce for testing. > > On Tuesday, May 1, 2018 at 3:03:47 PM UTC-4, John D Giotta wrote: >> >> Greetings, >> I'm attempting to use CAS as an OAuth2.0 server. I've read the >> documentation here: >> https://apereo.github.io/cas/5.2.x/installation/OAuth-OpenId-Authentication

[cas-user] Basic Example of CAS of Overlay Implementing OAuth2.0

Greetings, I'm attempting to use CAS as an OAuth2.0 server. I've read the documentation here: https://apereo.github.io/cas/5.2.x/installation/OAuth-OpenId-Authentication.html but I just can't seem to get it work My oauth-1001.json in /etc/cas/service { "@class" :