email address is not an attribure, but is in the authentication information

Created on 19 January 2024, over 1 year ago
Updated 22 January 2024, over 1 year ago

Problem/Motivation

CAS automatic user registration fails with "Not a valid email attribute".

Steps to reproduce

I am trying to implement automatic user registration for cas. On the main page, under email address assignment, I am trying to assign [cas:user], but when I use that value, it get a not valid email attribute message.
(We use the username as an email and do not send it out as an cas attribute.)
See CAS Authentication server response:

user1@example.com

xxx.xxx.xxx.xxx
false
true
false
2024-01-19T16:02:45.153158Z
.....
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
3602
UsernamePasswordCredential

-->

Proposed resolution

Implement the option to allow other fields from the cas server response, so that other fields can be used for the email address assignment.

✨ Feature request
Status

Active

Version

2.2

Component

CAS

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

  • The response did not get added correctly. (resubmitting.)

    user1@example.com

    xxx.xxx.xxx.xxx
    false
    true
    false
    2024-01-19T16:02:45.153158Z
    .....
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
    3602
    UsernamePasswordCredential
    -->

  • πŸ‡ΊπŸ‡ΈUnited States bkosborne New Jersey, USA

    Are you trying to add XML content? If so, surround it in tags first.

  • Yes. Sorry, I originally had is as a html comment.
    For some reason, I cannot update with the xml. (even with code tags)
    Below are the mappings from authentication response from our cas server:
    [cas:authenticationsuccess]
    [cas:user] -> user1@example.com
    [cas:attributes]
    [cas:clientipaddress] -> xxx.xxx.xxx.xxx
    [cas:one_time_use_password] -> false
    [cas:isfromnewlogin] -> true[/cas:isfromnewlogin]
    [cas:is_account_verified] -> false
    [cas:authenticationdate] -> 2024-01-19T16:02:45.153158Z
    .....
    [cas:useragent] -> Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
    [cas:days_to_password_expiration] -> 3602[/cas:days_to_password_expiration]
    [cas:credentialtype] -> UsernamePasswordCredential

  • πŸ‡ΊπŸ‡ΈUnited States bkosborne New Jersey, USA

    Hmm I see. I think that's quite unusual to not have the email address available as an attribute. What we need here is the ability to use the username as the email address. This is a feature request.

  • Thanks update. (and feature request)

    Our CAS server is setup with the username as their email address.
    I'll see if the CAS admins can add the email address as an attribute.

  • πŸ‡ΊπŸ‡ΈUnited States bkosborne New Jersey, USA

    That would be the easiest path forward!

Production build 0.71.5 2024