Leaving this here in case it helps. If I am incorrect, let me know. I could not get a 1:* mapping of ldap attributes to work in CAS 5.0.1. I have an internal identifier 'uid' in ldap that needs to be released as both 'uid' and 'UDC_IDENTIFIER'. I am only able to get cas to release 1:1, the last one mapped in cas.properties. To solve I overrode templates/protocol/3.0/casServiceValidationSuccess.html to statically output a duplicate attribute with tag name replaced when UDC_IDENTIFIER is hit.
changed <cas:attributes th:if="${not #lists.isEmpty(formattedAttributes)}"> <div th:each="attr : ${formattedAttributes}" th:remove="tag"> <div th:utext="${attr}" th:remove="tag"/> </div> </cas:attributes> to <cas:attributes th:if="${not #lists.isEmpty(formattedAttributes)}"> <div th:each="attr : ${formattedAttributes}" th:remove="tag"> <div th:utext="${attr}" th:remove="tag"/> <div th:if="${#strings.contains(attr, 'UDC_IDENTIFIER')}" th:remove="tag"> <span th:utext="${#strings.contains(attr, 'UDC_IDENTIFIER')} ? ${#strings.replace(attr, 'UDC_IDENTIFIER', 'uid')} : ${attr}" th:remove="tag"/> </div> </div> </cas:attributes> -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/41c3568a-6df7-4b41-8505-ea3a0f0474da%40apereo.org.