combine attributes: repository and delegated

28 views
Skip to first unread message

Alin Tomoiaga

unread,
Jan 2, 2019, 4:24:05 PM1/2/19
to CAS Community
How can I push combined list of delegated and local cas attributes to app?

As stated here: https://apereo.github.io/cas/5.3.x/integration/Delegate-Authentication.html

CAS can act as a client using the pac4j security engine and delegate the authentication to: CAS servers, SAML2 identity providers, OAuth2, ADFS,... 


In CAS-protected applications, through service ticket validation, user information are pushed to the CAS client and therefore to the application itself.

On CAS server side, to push attributes to the CAS client, it should be configured in the expected service:

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : "sample",
  "name" : "sample",
  "id" : 100,
  "description" : "sample",
  "attributeReleasePolicy" : {
    "@class" : "org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy",
    "allowedAttributes" : [ "java.util.ArrayList", [ "name", "first_name", "middle_name" ] ]
  }
}


But CAS also allows for jdbc attributes to be pulled from database:
cas.authn.attributeRepository.jdbc[0].attributes.uid=uid
# cas.authn.attributeRepository.jdbc[0].attributes.displayName=displayName
# cas.authn.attributeRepository.jdbc[0].attributes.cn=commonName
# cas.authn.attributeRepository.jdbc[0].attributes.affiliation=groupMembership

# cas.authn.attributeRepository.jdbc[0].singleRow=true
# cas.authn.attributeRepository.jdbc[0].order=0
....



How can I combine the list of attributes from the delegated source with the attributes pulled from the jdbc source and push both to the app? Or at least only push the jdbc attributes?

Thank you.


Reply all
Reply to author
Forward
0 new messages