CAS Management - Collection of Attributes in Attribute Release Policy

[Fahmi L. Ramdhani]

Hello,

How to configure the attribute list in the Attribute Release Policy (Return Allowed) in CAS Management? There only displays uid, eppn and givenName. While the attributes available in the database are uid, email, username, nip, phone and others. I want to display the array list based on the available attributes.

Thank you.

Fahmi

[David Curry]

For CAS 5.2.x, you configure the "stub" attribute repository with all the attribute names you want the management app to be able to work with (add these to the management.properties file, not cas.properties):

cas.authn.attributeRepository.stub.attributes.UDC_IDENTIFIER:   UDC_IDENTIFIER

cas.authn.attributeRepository.stub.attributes.cn:               cn

cas.authn.attributeRepository.stub.attributes.displayName:      displayName

cas.authn.attributeRepository.stub.attributes.givenName:        givenName

cas.authn.attributeRepository.stub.attributes.mail:             mail

cas.authn.attributeRepository.stub.attributes.sn:               sn

cas.authn.attributeRepository.stub.attributes.uid:              uid

I assume that's still the case with CAS 5.3.x and CAS 6.x, but it doesn't seem to be documented any longer.

--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
THE NEW SCHOOL • INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7575817d-2e4a-43dd-84f9-e051f17a8f73%40apereo.org.

[Fahmi L. Ramdhani]

Can the configuration be dynamic? The example in the settings has several attributes (Multi Row attribute resolution), I hope CAS Management can take attributes based on existing attributes (attribute key).

Can it be like that?

Thank you David

Sent from my iPhone

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAMrzTdHjUdUBmhUe%2BesEx_gt5VN0MCksV3fGsCfRMkNMA%40mail.gmail.com.

[David Curry]

I'm afraid I don't know the answer to that one.

--Dave

--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
THE NEW SCHOOL • INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7BF37BB2-C0CC-47AC-8A2A-8606EEA34456%40gmail.com.

[Fahmi L. Ramdhani]

I hope CAS Management can take attributes based on existing attributes (attribute key).

Thank David!