[cas-user] Re: Keycloak Backchannel Logout and CAS

That's interesting. Backchannel logout works in case load balancer of CAS (nginx) doesn't use SSL however backchannel doesn't work in case nginx uses SSL. I see the same output in console of CAS server in both cases (with SSL and without SSL) -- - Website: https://apereo.github.io/cas -

Re: [cas-user] Registry service from CAS MANAGEMENT WEB APP to MONGODB

The management app should must have the same store as cas. You can add the mongo dependency to the management overlay, same as cas. Ray On Mon, 2020-03-16 at 23:23 +0700, Nguyen Tran Thanh Lam wrote: Exactly I want I can use Web Management web App create new services and store it to MongoD Vào

Re: [cas-user] Registry service from CAS MANAGEMENT WEB APP to MONGODB

Exactly I want I can use Web Management web App create new services and store it to MongoD Vào 23:14, T.2, 16 Th3, 2020 Ray Bon đã viết: > Why do you want to have multiple service registry locations? > > If you want to use MongoDB, remove json entry. > > Ray > > On Fri, 2020-03-13 at 20:52

Re: [cas-user] CAS Cookie Comment

Jack Where do you see this comment 'CAS Cookie"? Ray On Sat, 2020-03-14 at 01:15 -0400, Jack wrote: How to change CAS Cookie Comment from "CAS Cookie" to "MyEDU SSO Cookie" ? Name can be changed, but the question is about the comment. Thanks! -- Ray Bon Programmer Analyst Development

Re: [cas-user] Registry service from CAS MANAGEMENT WEB APP to MONGODB

Dear Mr Ray Bon But Web Management can only create json file and store in /etc/cas/services-repo. And I want to store services in mongodB It conflicted. Vào 23:14, T.2, 16 Th3, 2020 Ray Bon đã viết: > Why do you want to have multiple service registry locations? > > If you want to use MongoDB,

Re: [cas-user] Registry service from CAS MANAGEMENT WEB APP to MONGODB

Why do you want to have multiple service registry locations? If you want to use MongoDB, remove json entry. Ray On Fri, 2020-03-13 at 20:52 -0700, Napoleon Ponaparte wrote: Hi all, I have confused with service registry. I have two methods to store service. Method 1: Using

Re: [cas-user] Re: Custom AUP Implementation

That was exactly what I was looking for, Nono! I had already accomplish the submission of variables, so the first two examples worked right on! Thanks a lot! Nono escreveu no dia quarta, 11/03/2020 à(s) 17:36: > Hello, we have done this : > > We have an independant rest api that manages the

Re: [cas-user] "Authentication issue instant is too old or in the future"

Sure. Go ahead... Le lun. 16 mars 2020 à 11:02, Ganesh and Sashi Prasad a écrit : > Hi Jerome, > > Thanks for the quick response. I have a SAML certificate (captured on this > user's browser using the SAML Message Decoder Chrome plugin), but since it > pertains to a client organisation's IdP, I

Re: [cas-user] "Authentication issue instant is too old or in the future"

Hi Jerome, Thanks for the quick response. I have a SAML certificate (captured on this user's browser using the SAML Message Decoder Chrome plugin), but since it pertains to a client organisation's IdP, I didn't want to attach it to a mail addressed to a mailing list. Can I send it to you

Re: [cas-user] "Authentication issue instant is too old or in the future"

Hi, Indeed, this kind of error is generally related to the *maximumAuthenticationLifetime* setting. But if only one user has an issue, it generally means that the setup is correct. Can you take a closer look a the SAML response he gets by enabling TRACE logs on org.opensaml? Thanks. Best

[cas-user] "Authentication issue instant is too old or in the future"

One of my users keeps having the same problem every time he tries to log in. He gets an "Access Unauthorized" message from CAS. He belongs to an organisation that has its own identity provider (Okta), and my setup delegates to his organisation's Okta server. I use CAS 5.2.9, and pac4j for