CAS 5.3.3 - NameID in SAML response xml problem

[magicserverpixiedust]

5.1.4:

<saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">covfefe@maga.us</saml2:NameID>

5.3.3-SNAPSHOT:

<saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" NameQualifier="https://www.rarepepes.com" SPNameQualifier="https://www.rarepepes.com" >covfefe@maga.us</saml2:NameID>

Seeing an odd issue between CAS versions regarding SAML responses.  Specifically, I have found in 5.3.3 the NameID portion of the response includes NameQualifier and SPNameQualifier by default.  I'm not seeing a way to disable this behavior.  This is breaking some of our apps in our test environment.  Waiting to put 5.3.3 in production till I figure this one out.  Anyone else see this behavior in 5.3.x?  Thanks,

[Bergner, Arnold]

Have you tried to disable it? There are a few options regarding NameIDs in the service management app / service definition.

 

Von: cas-...@apereo.org [mailto:cas-...@apereo.org] Im Auftrag von magicserverpixiedust
Gesendet: Dienstag, 25. September 2018 23:31
An: CAS Community <cas-...@apereo.org>
Betreff: [cas-user] CAS 5.3.3 - NameID in SAML response xml problem

 

5.1.4:

<saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">cov...@maga.us</saml2:NameID>

 

5.3.3-SNAPSHOT:

<saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" NameQualifier="https://www.rarepepes.com" SPNameQualifier="https://www.rarepepes.com" >cov...@maga.us</saml2:NameID>

 

Seeing an odd issue between CAS versions regarding SAML responses.  Specifically, I have found in 5.3.3 the NameID portion of the response includes NameQualifier and SPNameQualifier by default.  I'm not seeing a way to disable this behavior.  This is breaking some of our apps in our test environment.  Waiting to put 5.3.3 in production till I figure this one out.  Anyone else see this behavior in 5.3.x?  Thanks,

 

 

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/9f702028-a6e4-48e9-b14b-8cb644dacbec%40apereo.org.

[magicserverpixiedust]

Thanks, Arnold.  There are options in the management app to input a Service Provider Name Qualifier and Name Qualifier, but no option to disable it.  Providing a blank name yields the serviceId/entityID in the NameQualifier and SPNameQualifier in the NameID portion of the SAML response by default it appears.  There are some check boxes to skip the generation of optional fields, but no option to disable the NameQualifier and SPNameQualifier.   I looked over the 5.3.3 configuration properties documentation and not seeing a way to disable entirely.  =/