From 34cd7bbd5059bc834e4285842d1ed87b6a71844c Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Wed, 4 Feb 2026 14:20:10 -0500
Subject: [PATCH 1/7] remove trailing space from harvard idp

---
 etc/cas/config/instn-authn-prod.xsl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/cas/config/instn-authn-prod.xsl b/etc/cas/config/instn-authn-prod.xsl
index f1a2140d..b4f67b19 100644
--- a/etc/cas/config/instn-authn-prod.xsl
+++ b/etc/cas/config/instn-authn-prod.xsl
@@ -250,7 +250,7 @@
                         </user>
                     </xsl:when>
                     <!-- Harvard University (HARVARD) -->
-                    <xsl:when test="$idp='http://www.okta.com/exk1xrjz6q65XDb2J1d8 '">
+                    <xsl:when test="$idp='http://www.okta.com/exk1xrjz6q65XDb2J1d8'">
                         <id>harvard</id>
                         <user>
                             <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>

From 3380b0a90300236b2e4c5ebd19fc55d9a6e1f14b Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Wed, 4 Feb 2026 14:20:31 -0500
Subject: [PATCH 2/7] add washington state (wsu) via okta

---
 etc/cas/config/instn-authn-prod.xsl | 12 ++++++++++++
 etc/cas/config/shibboleth2-prod.xml |  6 ++++++
 2 files changed, 18 insertions(+)

diff --git a/etc/cas/config/instn-authn-prod.xsl b/etc/cas/config/instn-authn-prod.xsl
index b4f67b19..7ef776a7 100644
--- a/etc/cas/config/instn-authn-prod.xsl
+++ b/etc/cas/config/instn-authn-prod.xsl
@@ -895,6 +895,18 @@
                             <eduPerson>false</eduPerson>
                         </user>
                     </xsl:when>
+                    <!-- Washington State University (WSU) -->
+                    <xsl:when test="$idp='http://www.okta.com/exk196cuygihbtIwD2p8'">
+                        <id>wsu</id>
+                        <user>
+                            <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
+                            <fullname><xsl:value-of select="//attribute[@name='displayname']/@value"/></fullname>
+                            <familyName><xsl:value-of select="//attribute[@name='sn']/@value"/></familyName>
+                            <givenName><xsl:value-of select="//attribute[@name='givenname']/@value"/></givenName>
+                            <middleNames/>
+                            <suffix/>
+                        </user>
+                    </xsl:when>
                     <!-- Washington University in St. Louis (WUSTL) -->
                     <xsl:when test="$idp='https://login.wustl.edu/idp/shibboleth'">
                         <id>wustl</id>
diff --git a/etc/cas/config/shibboleth2-prod.xml b/etc/cas/config/shibboleth2-prod.xml
index ffcd05cd..2767770c 100644
--- a/etc/cas/config/shibboleth2-prod.xml
+++ b/etc/cas/config/shibboleth2-prod.xml
@@ -98,6 +98,12 @@
                           backingFilePath="vua-prod-idp-metadata.xml"
                           reloadInterval="180000" />
 
+        <!-- Washington State University (WSU) -->
+        <MetadataProvider type="XML"
+                          uri="https://wsu.okta.com/app/exk196cuygihbtIwD2p8/sso/saml/metadata"
+                          backingFilePath="wsu-prod-idp-metadata.xml"
+                          reloadInterval="180000" />
+
         <!-- Here is the end of non-InCommon/eduGAIN IdPs. Current total: 9 unique provider and 9 institutions. -->
 
         <!-- Here goes all InCommon/eduGAIN IdPs, all of which are production IdP server using the MDQ service -->

From 4e7278382adc4392c26a80cca144d1c9e0d3dbdb Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Tue, 17 Feb 2026 00:18:06 -0500
Subject: [PATCH 3/7] update wsu attributes and metadata uri

---
 etc/cas/config/instn-authn-prod.xsl | 5 +++--
 etc/cas/config/shibboleth2-prod.xml | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/etc/cas/config/instn-authn-prod.xsl b/etc/cas/config/instn-authn-prod.xsl
index 7ef776a7..95064eb7 100644
--- a/etc/cas/config/instn-authn-prod.xsl
+++ b/etc/cas/config/instn-authn-prod.xsl
@@ -901,9 +901,10 @@
                         <user>
                             <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
                             <fullname><xsl:value-of select="//attribute[@name='displayname']/@value"/></fullname>
-                            <familyName><xsl:value-of select="//attribute[@name='sn']/@value"/></familyName>
-                            <givenName><xsl:value-of select="//attribute[@name='givenname']/@value"/></givenName>
+                            <familyName><xsl:value-of select="//attribute[@name='lastName']/@value"/></familyName>
+                            <givenName><xsl:value-of select="//attribute[@name='firstName']/@value"/></givenName>
                             <middleNames/>
+                            <departmentRaw><xsl:value-of select="//attribute[@name='department']/@value"/></departmentRaw>
                             <suffix/>
                         </user>
                     </xsl:when>
diff --git a/etc/cas/config/shibboleth2-prod.xml b/etc/cas/config/shibboleth2-prod.xml
index 2767770c..85155907 100644
--- a/etc/cas/config/shibboleth2-prod.xml
+++ b/etc/cas/config/shibboleth2-prod.xml
@@ -100,7 +100,7 @@
 
         <!-- Washington State University (WSU) -->
         <MetadataProvider type="XML"
-                          uri="https://wsu.okta.com/app/exk196cuygihbtIwD2p8/sso/saml/metadata"
+                          uri="https://login.wsu.edu/app/exk196cuygihbtIwD2p8/sso/saml/metadata"
                           backingFilePath="wsu-prod-idp-metadata.xml"
                           reloadInterval="180000" />
 

From b5c72aef9750f844a8ddc86cc5b83309dbfc45bf Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Tue, 3 Mar 2026 20:38:52 -0500
Subject: [PATCH 4/7] add attributes for Wash. State U (wsu)

---
 etc/cas/config/attribute-map-prod.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/etc/cas/config/attribute-map-prod.xml b/etc/cas/config/attribute-map-prod.xml
index 501bcaa6..9991b454 100644
--- a/etc/cas/config/attribute-map-prod.xml
+++ b/etc/cas/config/attribute-map-prod.xml
@@ -247,4 +247,13 @@
     <!-- Washington University in St. Louis (WUSTL) -->
     <Attribute name="urn:oid:1.3.6.1.4.1.14519.1.1" id="institutionalidentity"/>
 
+    <!-- Washington State University -->
+    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="login"/> <!-- eppn? -->
+    <!-- ldapiness ensues... -->
+    <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="email"/>
+    <Attribute name="urn:oid:2.5.4.42" id="firstName"/>
+    <Attribute name="urn:oid:2.5.4.4" id="lastName"/>
+    <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>
+    <Attribute name="urn:oid:2.5.4.11" id="department"/>
+
 </Attributes>

From 2e03a661f6c2f0736ec3e5c745da0d5e1add4161 Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Thu, 5 Mar 2026 11:04:21 -0500
Subject: [PATCH 5/7] respond to code review

---
 etc/cas/config/attribute-map-prod.xml | 8 +-------
 etc/cas/config/instn-authn-prod.xsl   | 7 ++++---
 etc/cas/config/shibboleth2-prod.xml   | 2 +-
 3 files changed, 6 insertions(+), 11 deletions(-)

diff --git a/etc/cas/config/attribute-map-prod.xml b/etc/cas/config/attribute-map-prod.xml
index 9991b454..016fa2d1 100644
--- a/etc/cas/config/attribute-map-prod.xml
+++ b/etc/cas/config/attribute-map-prod.xml
@@ -247,13 +247,7 @@
     <!-- Washington University in St. Louis (WUSTL) -->
     <Attribute name="urn:oid:1.3.6.1.4.1.14519.1.1" id="institutionalidentity"/>
 
-    <!-- Washington State University -->
-    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="login"/> <!-- eppn? -->
-    <!-- ldapiness ensues... -->
-    <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="email"/>
-    <Attribute name="urn:oid:2.5.4.42" id="firstName"/>
-    <Attribute name="urn:oid:2.5.4.4" id="lastName"/>
-    <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>
+    <!-- Washington State University (wsu) -->
     <Attribute name="urn:oid:2.5.4.11" id="department"/>
 
 </Attributes>
diff --git a/etc/cas/config/instn-authn-prod.xsl b/etc/cas/config/instn-authn-prod.xsl
index 95064eb7..4854e305 100644
--- a/etc/cas/config/instn-authn-prod.xsl
+++ b/etc/cas/config/instn-authn-prod.xsl
@@ -901,11 +901,12 @@
                         <user>
                             <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
                             <fullname><xsl:value-of select="//attribute[@name='displayname']/@value"/></fullname>
-                            <familyName><xsl:value-of select="//attribute[@name='lastName']/@value"/></familyName>
-                            <givenName><xsl:value-of select="//attribute[@name='firstName']/@value"/></givenName>
+                            <familyName><xsl:value-of select="//attribute[@name='sn']/@value"/></familyName>
+                            <givenName><xsl:value-of select="//attribute[@name='givename']/@value"/></givenName>
                             <middleNames/>
-                            <departmentRaw><xsl:value-of select="//attribute[@name='department']/@value"/></departmentRaw>
                             <suffix/>
+                            <departmentRaw><xsl:value-of select="//attribute[@name='department']/@value"/></departmentRaw>
+                            <eduPerson>false</eduPerson>
                         </user>
                     </xsl:when>
                     <!-- Washington University in St. Louis (WUSTL) -->
diff --git a/etc/cas/config/shibboleth2-prod.xml b/etc/cas/config/shibboleth2-prod.xml
index 85155907..eb36cf2a 100644
--- a/etc/cas/config/shibboleth2-prod.xml
+++ b/etc/cas/config/shibboleth2-prod.xml
@@ -102,7 +102,7 @@
         <MetadataProvider type="XML"
                           uri="https://login.wsu.edu/app/exk196cuygihbtIwD2p8/sso/saml/metadata"
                           backingFilePath="wsu-prod-idp-metadata.xml"
-                          reloadInterval="180000" />
+                          reloadInterval="86400" />
 
         <!-- Here is the end of non-InCommon/eduGAIN IdPs. Current total: 9 unique provider and 9 institutions. -->
 

From 1feb6c5e0f9e80766c3c103c3b1899cb09ae5996 Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Thu, 5 Mar 2026 11:23:19 -0500
Subject: [PATCH 6/7] relocate wsu department attrs

---
 etc/cas/config/attribute-map-prod.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/etc/cas/config/attribute-map-prod.xml b/etc/cas/config/attribute-map-prod.xml
index 016fa2d1..26f2ea3b 100644
--- a/etc/cas/config/attribute-map-prod.xml
+++ b/etc/cas/config/attribute-map-prod.xml
@@ -201,6 +201,9 @@
     <!-- Princeton University (PU) -->
     <Attribute name="urn:oid:1.2.840.113556.1.2.141" id="department"/>
 
+    <!-- Washington State University (wsu) -->
+    <Attribute name="urn:oid:2.5.4.11" id="department"/>
+
     <!-- Selective SSO Filter Attribute -->
     <!-- University of Manchester (UOM) -->
     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="selectiveSsoFilter"/>
@@ -247,7 +250,4 @@
     <!-- Washington University in St. Louis (WUSTL) -->
     <Attribute name="urn:oid:1.3.6.1.4.1.14519.1.1" id="institutionalidentity"/>
 
-    <!-- Washington State University (wsu) -->
-    <Attribute name="urn:oid:2.5.4.11" id="department"/>
-
 </Attributes>

From 3789630dfaad1b0d6647d94bff598ff237e2ad2b Mon Sep 17 00:00:00 2001
From: Fitz Elliott <fitz@cos.io>
Date: Thu, 5 Mar 2026 11:42:30 -0500
Subject: [PATCH 7/7] fix attribute name typo

---
 etc/cas/config/instn-authn-prod.xsl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/cas/config/instn-authn-prod.xsl b/etc/cas/config/instn-authn-prod.xsl
index 4854e305..cbfcd601 100644
--- a/etc/cas/config/instn-authn-prod.xsl
+++ b/etc/cas/config/instn-authn-prod.xsl
@@ -902,7 +902,7 @@
                             <username><xsl:value-of select="//attribute[@name='mail']/@value"/></username>
                             <fullname><xsl:value-of select="//attribute[@name='displayname']/@value"/></fullname>
                             <familyName><xsl:value-of select="//attribute[@name='sn']/@value"/></familyName>
-                            <givenName><xsl:value-of select="//attribute[@name='givename']/@value"/></givenName>
+                            <givenName><xsl:value-of select="//attribute[@name='givenname']/@value"/></givenName>
                             <middleNames/>
                             <suffix/>
                             <departmentRaw><xsl:value-of select="//attribute[@name='department']/@value"/></departmentRaw>