I'm trying to configure CAS 5.3.3 as a SAML IdP. That part seems to work, 
but I want it to delegate authentication to an existing CAS server, but 
doing that it forgets to reply to the SP in SAML, and instead sends a CAS 
service ticket.

Before the CAS/IdP has a session for the user it breaks, forgetting to 
reply in saml:
SP =(saml)=> CAS/Idp =(cas)=> CAS =(cas)=> CAS/Idp =(cas!!)=> SP

Then trying again now that the CAS/IdP has a session for the user it works:
SP =(saml)=> CAS/IdP =(saml)=> SP

The IdP works.
The delegated auth to cas works.
Doing them together, how my users would, doesn't work.

Is this a bug?
Is there something I have to configure to get it to resume with saml when 
it has to do the delegated auth?

Thanks,
Jon

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/31c92cbc-dfbe-45d9-b2b8-d8e14eed376e%40apereo.org.

Reply via email to