[cas-user] CAS logout page does not use custom theme - is it a bug?

2021-07-21 Thread Chia-Ying Yang
I want to confirm whether this is a bug or not, in the current master branch. I configured a custom theme for a registered service.  If I override casLoginView.html via overlay (src/main/resources/templates/[theme]/login/casLoginView.html), then the custom login page template is being used

Re: [cas-user] Cas 6.3.2 services . User One loged to service1 why has he been authed to servise 2 if i use excludeAuthHandlers

2021-07-21 Thread Ray Bon
Artur, I think excludedAuthenticationHandlers is only for the authentication flow and not a policy for service access. Take a look at, https://apereo.github.io/cas/6.3.x/services/Configuring-Service-Access-Strategy.html for service access policy. Ray On Wed, 2021-07-21 at 03:41 -0700, artur

Re: [cas-user] CAS server to client - Attribute release issue in clustered environment

2021-07-21 Thread Ray Bon
Anusuya, Try these loggers to see if cas is changing the attribute or if that is what is returned to cas from the attribute source.

[cas-user] Re: cas delegate skip WAYF screen

2021-07-21 Thread Alin Tomoiaga
I do see this "CAS does allow options for auto-redirection of the authentication flow to a provider, if only there is a single provider available and configured." (https://apereo.github.io/cas/5.2.x/integration/Delegate-Authentication.html#user-interface). But this is such a useful feature

[cas-user] Re: cas delegate skip WAYF screen

2021-07-21 Thread Alin Tomoiaga
This is the behavior that I am seeing in 5.2.7: - if I have a single delegated idp, this works https://myapppretectedwithcas?client_name=remoteidp1 . It works great; get redirected to remoteidp1 comes back to app, great.

Re: [cas-user] buji-pac4j-demo-master, CAS delegation through pac4j-webflow and 1 OIDC provider

2021-07-21 Thread Alin Tomoiaga
Thank you very much, I appreciate your time and opinion. Best, Alin On Wednesday, July 21, 2021 at 10:31:58 AM UTC-4 Alin Tomoiaga wrote: > Hi @leleuj, > > This is the behavior that I am seeing in 5.2.7: > - if I have a single delegated idp, this works >

Re: [cas-user] buji-pac4j-demo-master, CAS delegation through pac4j-webflow and 1 OIDC provider

2021-07-21 Thread Alin Tomoiaga
Hi @leleuj, This is the behavior that I am seeing in 5.2.7: - if I have a single delegated idp, this works https://myapppretectedwithcas?client_name=remoteidp1. It works great; get redirected to remoteidp1 comes back to app, great. cas.authn.pac4j.cas[0].loginUrl=https://remoteidp1/cas/login

[cas-user] Re: Multiple PAC4J Clients - Unauthorized Access

2021-07-21 Thread Alin Tomoiaga
Have you managed to find an answer to this question? I am very much interested in the same thing? On Saturday, March 24, 2018 at 11:55:47 AM UTC-4 ssog...@gmail.com wrote: > Well, I guess /cas/login?client_name=SAML2Client is allowed only for > SAMLResponse (HTTP POST Operation). > > The

[cas-user] cas delegate skip WAYF screen

2021-07-21 Thread Alin Tomoiaga
How can we skip the WAYF (choose IDP screen) when delegating to multiple IDPs? Consider the scenario: - our cas delegates to two other cas servers - when the use logs in, they are presented with a screen allowing them to choose the IDP - every time the user logs in, they need to choose the idp.

[cas-user] Re: Help with redirecting user after terminating sessions

2021-07-21 Thread Alin Tomoiaga
I am also interested in this question. Have you found an answer? Thanks. On Tuesday, April 16, 2019 at 1:47:05 PM UTC-4 deejam wrote: > No one has any experience with the CAS logout flow when delegating > authentication to a third party SAML IDP? > > It seems like we basically need to preserve

[cas-user] Cas 6.3.2 services . User One loged to service1 why has he been authed to servise 2 if i use excludeAuthHandlers

2021-07-21 Thread artur miś
Hello, - 3 handlers . - 2 services If i have in service AA "authenticationPolicy" : { "@class" : "org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy", "requiredAuthenticationHandlers" : ["java.util.TreeSet", ["a", "b" ]], "excludedAuthenticationHandlers" :