{"action":"closed","issue":{"url":"https://api.github.com/repos/Jasig/cas/issues/1483","labels_url":"https://api.github.com/repos/Jasig/cas/issues/1483/labels{/name}","comments_url":"https://api.github.com/repos/Jasig/cas/issues/1483/comments","events_url":"https://api.github.com/repos/Jasig/cas/issues/1483/events","html_url":"https://github.com/Jasig/cas/issues/1483","id":128637274,"number":1483,"title":"Allow the WSFed Resolver to only release credential attributes","user":{"login":"mmoayyed","id":1205228,"avatar_url":"https://avatars.githubusercontent.com/u/1205228?v=3","gravatar_id":"","url":"https://api.github.com/users/mmoayyed","html_url":"https://github.com/mmoayyed","followers_url":"https://api.github.com/users/mmoayyed/followers","following_url":"https://api.github.com/users/mmoayyed/following{/other_user}","gists_url":"https://api.github.com/users/mmoayyed/gists{/gist_id}","starred_url":"https://api.github.com/users/mmoayyed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmoayyed/subscriptions","organizations_url":"https://api.github.com/users/mmoayyed/orgs","repos_url":"https://api.github.com/users/mmoayyed/repos","events_url":"https://api.github.com/users/mmoayyed/events{/privacy}","received_events_url":"https://api.github.com/users/mmoayyed/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Jasig/cas/labels/Authentication","name":"Authentication","color":"5319e7"},{"url":"https://api.github.com/repos/Jasig/cas/labels/Improvement","name":"Improvement","color":"009800"},{"url":"https://api.github.com/repos/Jasig/cas/labels/Minor","name":"Minor","color":"fbca04"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/Jasig/cas/milestones/15","html_url":"https://github.com/Jasig/cas/milestones/4.3.0","labels_url":"https://api.github.com/repos/Jasig/cas/milestones/15/labels","id":1349862,"number":15,"title":"4.3.0","description":"CAS version 4.3.0 minor release","creator":{"login":"mmoayyed","id":1205228,"avatar_url":"https://avatars.githubusercontent.com/u/1205228?v=3","gravatar_id":"","url":"https://api.github.com/users/mmoayyed","html_url":"https://github.com/mmoayyed","followers_url":"https://api.github.com/users/mmoayyed/followers","following_url":"https://api.github.com/users/mmoayyed/following{/other_user}","gists_url":"https://api.github.com/users/mmoayyed/gists{/gist_id}","starred_url":"https://api.github.com/users/mmoayyed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mmoayyed/subscriptions","organizations_url":"https://api.github.com/users/mmoayyed/orgs","repos_url":"https://api.github.com/users/mmoayyed/repos","events_url":"https://api.github.com/users/mmoayyed/events{/privacy}","received_events_url":"https://api.github.com/users/mmoayyed/received_events","type":"User","site_admin":false},"open_issues":15,"closed_issues":46,"state":"open","created_at":"2015-10-12T01:28:38Z","updated_at":"2016-01-28T20:09:05Z","due_on":"2016-04-19T07:00:00Z","closed_at":null},"comments":1,"created_at":"2016-01-25T21:01:53Z","updated_at":"2016-01-28T20:09:05Z","closed_at":"2016-01-28T20:09:05Z","body":"Presently, the resolver releases both the credential (ADFS) and the principal attributes. Ideally, the external authN provider should be trusted with all attributes it's releasing since it's the authoritative subject on which attributes, how and when should be released. CAS should just act as proxy that it is, moving attributes back and forth from the IDP to the SP. \r\n\r\nCustom use cases that require principal attributes, well, have to be handled in a custom manner. "}}