Implementers of CAS Server must provide the following extended attributes for all successful service validations.


Attribute Key Required/
Optional
Accepted
Values
Description
nameidentifier
required
This should be the username used by the user in the portal. A unique value should be provided for each user, regardless of the user type. The username does not have to be in any specific format.
givenname

required


The user's given/first name.
surname

required


The user's surname/last name.
studentid required    The school or institution’s internal student identifier, used by the for certain searches and when providing some types of output. Characters and numbers are valid up to a maximum length of 32.
mail optional
The e-mail address that should be used as the student’s preferred e-mail address. A valid e-mail in the form of user@domain.com should be provided. This claim is optional, and is used to update the student’s profile.


Attributes must be provided in the following format:


<cas:attributes>

   <cas:{attribute key}>attr.value</cas:{attribute key}>

</cas:attributes>


Example service validation success response:

 

<cas:serviceResponse xmlns:cas='shibcamplogdev.cloudapp.net'>
  <cas:authenticationSuccess>
     <cas:user>user_login_name</cas:user>
     <cas:attributes>
       <cas:nameidentifier>johnsmith</cas:nameidentifier>
       <cas:givenname>John</cas:givenname>
       <cas:surname>Smith</cas:surname>
       <cas:studentid>123-456789-000</cas:studentid>
       <cas:mail>johnsmith@maildomain.com</cas:mail>
    </cas:attributes>
  </cas:authenticationSuccess>
</cas:serviceResponse>