November 2017
Intermediate to advanced
542 pages
14h 24m
English
The first step requires us to map LDAP attributes to attributes in the CAS assertion (including the role attribute, which we're expecting to contain the user's GrantedAuthority).
We'll add another bit of configuration to the CAS deployerConfigContext.xml file. This new bit of configuration is required to instruct CAS as to how to map attributes from the CAS Principal object to the CAS IPersonAttributes object, which will ultimately be serialized as part of ticket validation. This bean configuration should replace the bean of the same name—which is attributeRepository—as follows:
//cas-server/src/main/webapp/WEB-INF/deployerConfigContext.xml <bean id="attributeRepository" class="org.jasig.services.persondir ...
Read now
Unlock full access