Enterprise Single Sign-On for All

View on GitHub

Attribute Release

Attributes are returned to scoped services and pass through a two-step process:

  • Attribute Resolution: Done at the time of establishing the principal, usually via PrincipalResolver components where attributes are resolved from various sources.
  • Attribute Release: Adopters must explicitly configure attribute release for services in order for the resolved attributes to be released to a service in the validation response.
Service Management

Attribute release may also be configured via the Service Management tool.

Principal-Id Attribute

Decide how CAS-protected applications should receive the authenticated userid. See this guide for more info.

Attribute Release Policy

Decide how CAS should release attributes to applications. See this guide for more info.

Provide the ability to enforce user consent to attribute release. See this guide for more info.

Caching Attributes

Control how resolved attributes by CAS should be cached. See this guide for more info.

Encrypting Attributes

CAS by default supports the ability to encrypt certain attributes, such as the proxy-granting ticket and the credential conditionally. The default implementation of the attribute encoder will use a per-service key-pair to encrypt sensitive attributes. See this guide to learn more.