Can I force a service to authenticate every time from the CAS server side,
e.g., by setting something in the service registry? Basically, I want to
mimic the behavior of "&renew=true" but not have to change anything on the
client side.

I thought setting "accessStrategy.ssoEnabled: false" in the service
registry entry would do this, but in testing this morning, it appears
that's not the case. That setting forces the service to prompt for login
even if you've signed into something else through CAS, but it doesn't
require you to re-enter your credentials every time you access the same
service. What I want is "Open tab, go to X, enter credentials. Open another
tab, go to X again, have to enter credentials again."

CAS 5.2.x, BTW.

Thanks,
--Dave

--

DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAO0A_FHTayuNX25UxC0rpY2DPzy5_d1xuyk%3DVSfCqR18g%40mail.gmail.com.

Reply via email to