Implementers of CAS Server must provide the following extended attributes for all successful service validations.
Attribute Key | Required/ Optional |
Accepted Values |
Description |
nameidentifier |
required | This should be the username used by the user in the portal. A unique value should be provided for each user, regardless of the user type. The username does not have to be in any specific format. | |
givenname | required |
The user's given/first name. | |
surname | required |
The user's surname/last name. | |
studentid | required | The school or institution’s internal student identifier, used by the for certain searches and when providing some types of output. Characters and numbers are valid up to a maximum length of 32. | |
optional | The e-mail address that should be used as the student’s preferred e-mail address. A valid e-mail in the form of user@domain.com should be provided. This claim is optional, and is used to update the student’s profile. |
Attributes must be provided in the following format:
<cas:attributes> <cas:{attribute key}>attr.value</cas:{attribute key}> </cas:attributes> |
Example service validation success response:
<cas:serviceResponse xmlns:cas='shibcamplogdev.cloudapp.net'>
<cas:authenticationSuccess> <cas:user>user_login_name</cas:user> <cas:attributes> <cas:nameidentifier>johnsmith</cas:nameidentifier> <cas:givenname>John</cas:givenname> <cas:surname>Smith</cas:surname> <cas:studentid>123-456789-000</cas:studentid> <cas:mail>johnsmith@maildomain.com</cas:mail> </cas:attributes> </cas:authenticationSuccess> </cas:serviceResponse> |