Extended attributes for CDSSO

CDSSO can handle extended attributes in two ways.

Two ways to handle extended attributes:

• The [cdsso-token-attributes] stanza of the WebSEAL configuration file is checked for configured stanza entries.
• The CDMF library is called (cdmf_get_usr_attributes) to obtain additional attributes.

Attributes from the CDMF library override any settings in the [cdcsso-token-attributes] stanza.

This section describes the use of the [cdsso-token-attributes] stanza and contains the following topics:

• Extended attributes to add to token
  
• Extended attributes to extract from a token
  In the WebSEAL configuration file, we can specify how the token consume module handles extended attributes that have been added to a cross-domain single sign-on token.

Parent topic: Single Sign-on Solutions