Hi Andrey, I do know for a fact that my CAS 5.3.x is running with SAML as idp and connecting to other SAML sp just fine (multiple SAML client, including SimpleSAMLPHP), no need modify the generated idp-metadata.xmp for me.
So... Maybe if you still can't successfully connect to SAML, it could be the following: - Maybe CAS 6 have bug - Maybe keycloak doesn't actually return the attribute to you (highly doubt it) - Maybe your config is wrong (which is unlikely, from what you provide it seems the config is ok) So, maybe try using CAS 5.3.x and see if that work? CAS 5 to 6 have a big jump, so it is possible that there is some obscure bug that discovered first by you. - Andy -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/01d42a53-9112-44dc-9b47-9c53a1ca4271%40apereo.org.
