For SSO to work, only the server has to be over HTTPs. The only other thing that could prevent it is if you are rejecting cookies. Other than that I've never seen the CAS server not do SSO.
On Mon, Aug 1, 2011 at 11:35 AM, Roland Kofler <roland.kof...@tis.bz.it>wrote: > > > Are you running CAS over HTTP? We disable SSO over HTTP by default (we > > require HTTPS) > I am redirected to a HTTPS CAS login site. > But both applications /share and /bonita are not https. > > Must they? > > -- > You are currently subscribed to cas-user@lists.jasig.org as: > scott.battag...@gmail.com > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
