Hi, I'm trying to get the CAS 5.x.x SAML2 IdP working with an external Tomcat 8. I've tried CAS 5.0.2 and newly released CAS 5.0.3 and got the SAML 2 SSO protocol going. Unfortunately the final POST (redirect) back to the service from CAS was missing the RelayState, which is a known bug to be targeted for 5.1.0. So I tried the new CAS 5.1.0-RC1 with the same configuration. But I got the following error:
2017-02-21 11:06:40,741 WARN [org.apereo.cas.support.saml.web.idp.profile.SSOPostProfileHandlerController] - <[https://ts3.security.army.mil/TS3AuthFilter] is not found in the registry or service access is denied. Ensure service is registered in service registry> I do have a JSON SAML service config in WEB-INF/classes/services, which was working with CAS 5.0.x. Comparing the Tomcat console logs, I found that CAS 5.1.0-RC1 log was missing JsaonServiceRegistryDao's logging to load the services configs in WEB-INF/classes/services/. My questions are: - Does CAS 5.1.0-RC1 still deploy a JsonServiceRegistryDao to read in the initial services config from WEB-INF/classes? - If so then why the same SAML service config did not work? - If not, then how can I register the SAML service now w/o using the Service Management? Thanks, Gang -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7042f5c9-a2b0-40ad-bb42-017a58a25174%40apereo.org.
