replace cas:user

[Ekouyoja]

Hello,

I am facing a problem with this plugin.

Actually, on my cas server i use the principal-attribute configuration to send a particular attribute (uid) as username (cas:user) to my apps. My users connect thereself with sAMAccountName attribute.

Now with keycloak, I have this ldap configuration

My users connect thereself with sAMAccountName attribute but like cas Server i want to send to my clients that cas:user is uid attribute not sAMAccountName. I think mappers only write cas:attributes.
Is there one way to do it ?

I can give more informations if needed.
Thanks for your work

[jacekkow]

As Keycloak's "username" attribute is the only one that is guaranteed to be present and uniquely identify the user - it is used in the user parameter of CAS response and it is not customizable.

As I understand you have a setup similar to this:

sAMAccountName: John.Smith
uid: jsmith

and CAS apps are using the latter identifier.

In order to achieve requested behavior, you would need to change the line indicated below in file src/main/java/org/keycloak/protocol/cas/endpoints/ServiceValidateEndpoint.java:

        CASServiceResponse serviceResponse = ServiceResponseHelper.createSuccess(userSession.getUser().getUsername(), attributes);

replacing getUsername() with getAttribute("attribute_name").get(0) (and some fallback if there is no attribute, unless you are OK with "500 Internal Server Error").

Unfortunately I am reluctant to make it customizable here.

[Ekouyoja]

Hello,

I understand the guarantee of uniqueness and my attribute 'uid' is unique for each user.
It give me an other possibility to implement my need.
Thank you for your response

[Ekouyoja]

Hi,
I'm sorry to reopen it, it seems the UserModel have change so the workaround you provide me didn't work anymore.
I would appreciate if you can give me the same workaround updated.

I have try to do it on my own for few hours but the developping skills don't appear by magic :D
Thank you

[jacekkow]

@Ekouyoja: the change would be very minor - from getAttribute(...).get(0) to getFirstAttribute(...)

[Ekouyoja]

Sorry i didn't take the time to give you a response.
Thank you :)