SAML Response Attribute Definition change between CAS 6.6.x and CAS 7.0.x and up

41 views
Skip to first unread message

Derek Badge

unread,
Aug 9, 2025, 2:50:11 AMAug 9
to CAS Community
Hello everyone,

We are in the middle of a migration from CAS v6.6.x to v7.2.x and are completely stuck on a SAML attribute release issue. We've been troubleshooting this and would be grateful for any insight the community can offer.

Our Goal is very simple:

Take the source directory attribute cn and release it in the SAML assertion with the Name uid.  I have two SP's now where they require a specific Name and will not read FriendlyName.  

The Problem:
In 6.6.x, mapping cn to uid results in:
<saml2:Attribute FriendlyName="uid" Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

in 7.0.x and up it reads the attribute definition and overwrites Name,
<saml2:Attribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

I'm sure there's probably some easy way of doing this that I'm completely missing. 

Best Regards,

Derek

Eugene Willis

unread,
Aug 9, 2025, 12:20:26 PMAug 9
to cas-...@apereo.org, Community CAS
Hey we experienced this we had to add an empty “samlidp-attribute-definitions.json” in your build the path src/main/resources/ . 
Sent from my iPhone

On Aug 9, 2025, at 2:50 AM, 'Derek Badge' via CAS Community <cas-...@apereo.org> wrote:

Hello everyone,
--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c4ba2a72-1240-4b3e-a4ce-19fb9e4490e8n%40apereo.org.

Derek Badge

unread,
Aug 9, 2025, 11:33:09 PMAug 9
to CAS Community, Eugene Willis, Community CAS
That makes sense.  Thanks for that, it was driving me nuts.  I have found the other thread referring to making that change.
Reply all
Reply to author
Forward
0 new messages