From f214ca8be4bf0dabcc6da618d0cdd0c8d4a74ec3 Mon Sep 17 00:00:00 2001
From: futa-ikeda <51409893+futa-ikeda@users.noreply.github.com>
Date: Thu, 19 Mar 2026 11:27:10 -0400
Subject: [PATCH 1/2] [ENG-10250] Add Texas A&M University for SSO (#104)

* Add Texas A&M Univ as supported institution
* Apply suggestions from @cslzchen

---------

Co-authored-by: Longze Chen <cslzchen@gmail.com>
---
 etc/cas/config/instn-authn-prod.xsl | 12 ++++++++++++
 etc/cas/config/instn-authn-test.xsl | 12 ++++++++++++
 etc/cas/config/shibboleth2-prod.xml |  1 +
 etc/cas/config/shibboleth2-test.xml |  1 +
 4 files changed, 26 insertions(+)

diff --git a/etc/cas/config/instn-authn-prod.xsl b/etc/cas/config/instn-authn-prod.xsl
index f1a2140d..8b6e4f48 100644
--- a/etc/cas/config/instn-authn-prod.xsl
+++ b/etc/cas/config/instn-authn-prod.xsl
@@ -457,6 +457,18 @@
                             <suffix/>
                         </user>
                     </xsl:when>
+                    <!-- Texas A&M University (TAMU) -->
+                    <xsl:when test="$idp='urn:mace:incommon:tamu.edu'">
+                        <id>tamu</id>
+                        <user>
+                            <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
+                            <fullname><xsl:value-of select="//attribute[@name='displayname']/@value"/></fullname>
+                            <givenName><xsl:value-of select="//attribute[@name='givenname']/@value"/></givenName>
+                            <familyName><xsl:value-of select="//attribute[@name='sn']/@value"/></familyName>
+                            <middleNames/>
+                            <suffix/>
+                        </user>
+                    </xsl:when>
                     <!-- Towson University (TU) -->
                     <xsl:when test="$idp='https://shib.towson.edu/idp/shibboleth'">
                         <id>tu</id>
diff --git a/etc/cas/config/instn-authn-test.xsl b/etc/cas/config/instn-authn-test.xsl
index bd556e22..762467e5 100644
--- a/etc/cas/config/instn-authn-test.xsl
+++ b/etc/cas/config/instn-authn-test.xsl
@@ -309,6 +309,18 @@
                             <suffix/>
                         </user>
                     </xsl:when>
+                    <!-- Texas A&M University (TAMU) -->
+                    <xsl:when test="$idp='urn:mace:incommon:tamu.edu'">
+                        <id>tamu</id>
+                        <user>
+                            <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
+                            <fullname><xsl:value-of select="//attribute[@name='displayname']/@value"/></fullname>
+                            <givenName><xsl:value-of select="//attribute[@name='givenname']/@value"/></givenName>
+                            <familyName><xsl:value-of select="//attribute[@name='sn']/@value"/></familyName>
+                            <middleNames/>
+                            <suffix/>
+                        </user>
+                    </xsl:when>
                     <!-- University of Arizona (UA) -->
                     <xsl:when test="$idp='urn:mace:incommon:arizona.edu'">
                         <id>ua</id>
diff --git a/etc/cas/config/shibboleth2-prod.xml b/etc/cas/config/shibboleth2-prod.xml
index ffcd05cd..b161245a 100644
--- a/etc/cas/config/shibboleth2-prod.xml
+++ b/etc/cas/config/shibboleth2-prod.xml
@@ -121,6 +121,7 @@
         <!-- Princeton University -->
         <!-- Purdue University -->
         <!-- Temple University -->
+        <!-- Texas A&M University -->
         <!-- The University of Oklahoma -->
         <!-- The University of Texas at Dallas -->
         <!-- Tufts University -->
diff --git a/etc/cas/config/shibboleth2-test.xml b/etc/cas/config/shibboleth2-test.xml
index 7da62567..a88de802 100644
--- a/etc/cas/config/shibboleth2-test.xml
+++ b/etc/cas/config/shibboleth2-test.xml
@@ -118,6 +118,7 @@
         <!-- Princeton University -->
         <!-- Purdue University -->
         <!-- Temple University -->
+        <!-- Texas A&M University -->
         <!-- The University of Oklahoma -->
         <!-- The University of Texas at Dallas -->
         <!-- Tufts University -->

From e972cc9adcef8cc88840862d3766ebc2d7ddfdcd Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Thu, 19 Mar 2026 11:28:46 -0400
Subject: [PATCH 2/2] [ENG-10178] Add Washington State University (WSU) for SSO
 (#102)

* remove trailing space from harvard idp
* add washington state (wsu) via okta
* update wsu attributes and metadata uri
* add attributes for Wash. State U (wsu)
* respond to code review
* relocate wsu department attrs
* fix attribute name typo
---
 etc/cas/config/attribute-map-prod.xml |  3 +++
 etc/cas/config/instn-authn-prod.xsl   | 16 +++++++++++++++-
 etc/cas/config/shibboleth2-prod.xml   |  6 ++++++
 3 files changed, 24 insertions(+), 1 deletion(-)

diff --git a/etc/cas/config/attribute-map-prod.xml b/etc/cas/config/attribute-map-prod.xml
index 501bcaa6..26f2ea3b 100644
--- a/etc/cas/config/attribute-map-prod.xml
+++ b/etc/cas/config/attribute-map-prod.xml
@@ -201,6 +201,9 @@
     <!-- Princeton University (PU) -->
     <Attribute name="urn:oid:1.2.840.113556.1.2.141" id="department"/>
 
+    <!-- Washington State University (wsu) -->
+    <Attribute name="urn:oid:2.5.4.11" id="department"/>
+
     <!-- Selective SSO Filter Attribute -->
     <!-- University of Manchester (UOM) -->
     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="selectiveSsoFilter"/>
diff --git a/etc/cas/config/instn-authn-prod.xsl b/etc/cas/config/instn-authn-prod.xsl
index 8b6e4f48..36bd1421 100644
--- a/etc/cas/config/instn-authn-prod.xsl
+++ b/etc/cas/config/instn-authn-prod.xsl
@@ -250,7 +250,7 @@
                         </user>
                     </xsl:when>
                     <!-- Harvard University (HARVARD) -->
-                    <xsl:when test="$idp='http://www.okta.com/exk1xrjz6q65XDb2J1d8 '">
+                    <xsl:when test="$idp='http://www.okta.com/exk1xrjz6q65XDb2J1d8'">
                         <id>harvard</id>
                         <user>
                             <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
@@ -907,6 +907,20 @@
                             <eduPerson>false</eduPerson>
                         </user>
                     </xsl:when>
+                    <!-- Washington State University (WSU) -->
+                    <xsl:when test="$idp='http://www.okta.com/exk196cuygihbtIwD2p8'">
+                        <id>wsu</id>
+                        <user>
+                            <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
+                            <fullname><xsl:value-of select="//attribute[@name='displayname']/@value"/></fullname>
+                            <familyName><xsl:value-of select="//attribute[@name='sn']/@value"/></familyName>
+                            <givenName><xsl:value-of select="//attribute[@name='givenname']/@value"/></givenName>
+                            <middleNames/>
+                            <suffix/>
+                            <departmentRaw><xsl:value-of select="//attribute[@name='department']/@value"/></departmentRaw>
+                            <eduPerson>false</eduPerson>
+                        </user>
+                    </xsl:when>
                     <!-- Washington University in St. Louis (WUSTL) -->
                     <xsl:when test="$idp='https://login.wustl.edu/idp/shibboleth'">
                         <id>wustl</id>
diff --git a/etc/cas/config/shibboleth2-prod.xml b/etc/cas/config/shibboleth2-prod.xml
index b161245a..55f8e789 100644
--- a/etc/cas/config/shibboleth2-prod.xml
+++ b/etc/cas/config/shibboleth2-prod.xml
@@ -98,6 +98,12 @@
                           backingFilePath="vua-prod-idp-metadata.xml"
                           reloadInterval="180000" />
 
+        <!-- Washington State University (WSU) -->
+        <MetadataProvider type="XML"
+                          uri="https://login.wsu.edu/app/exk196cuygihbtIwD2p8/sso/saml/metadata"
+                          backingFilePath="wsu-prod-idp-metadata.xml"
+                          reloadInterval="86400" />
+
         <!-- Here is the end of non-InCommon/eduGAIN IdPs. Current total: 9 unique provider and 9 institutions. -->
 
         <!-- Here goes all InCommon/eduGAIN IdPs, all of which are production IdP server using the MDQ service -->