The org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver object that comes configured, by default, with CAS doesn't allow us to pass back attribute information and demonstrate this feature of Spring Security CAS integration, so we'd suggest using an implementation that does allow this.
An easy authentication handler to configure and use (especially if you have gone through the previous chapter's LDAP exercises) is org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler, which communicates with the embedded LDAP server that we used in the previous chapter. We'll lead you through the configuration of CAS that returns user LDAP attributes in the following ...
