[cas-user] Re: Ldap Custom Attribute Resolution

2020-01-20 Thread craab
I was able to create a custom "RegisteredServiceAttributeFilter", where fetch the mapped group/roles from the database and add them to the profiles attributes. Am Montag, 20. Januar 2020 08:56:50 UTC+1 schrieb craab: > > Hi, > > I am using CAS 6.1.3 with Ldap. I ha

[cas-user] Ldap Custom Attribute Resolution

2020-01-19 Thread craab
Hi, I am using CAS 6.1.3 with Ldap. I have configured Ldap for Authtication and as attribute repository. Additionally I have a jdbc attribute repository. Merging rule is configered to "MULTIVALUED". Now I want to map the users ldap groups to roles and add those to the users attributes. The rol

[cas-user] Re: I can't authenticate with GOOGLE using PAC4J

2020-01-14 Thread craab
Which CAS Version are you using? Try setting the scope to: cas.authn.pac4j.google.scope=EMAIL_AND_PROFILE Am Freitag, 10. Januar 2020 20:10:53 UTC+1 schrieb Fernando Gómez: > > Hello everyone, I hope you can help me, I am implementing authentication > with Google using Pac4j, I configure everyth

[cas-user] Re: How to configure keycloak / CSRF exception

2020-01-14 Thread craab
j.oauth.credentials.extractor.OAuth20CredentialsExtractor] - > Optional[TST-1-v2iEP65j26oNpIiw8BDBI7TnyWs5cwRW]> > 2020-01-14 09:35:28,328 INFO [org.pac4j.oauth.client.Google2Client] - > session expired or possible threat of cross-site request forgery> > > On Tuesday, Jan

[cas-user] Re: How to configure keycloak / CSRF exception

2020-01-13 Thread craab
Found, that actually the OAuth-Webflow breaks all pac4j/openId mechanisms. Further discussions may take place here: https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/67b0RCGNwHQ -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guideli

[cas-user] OAuth-Webflow breaks OpenId/Pac4j-Webflow

2020-01-13 Thread craab
Greating. I have found an issue and don't know, if it is a bug or intended. I added ldap and keycloak via org.apereo.cas:cas-server-support-openid-webflow:${project.'cas.version'} and org.apereo.cas:cas-server-support-ldap:${project.'cas.version'} That works. But as soon as I add org.apereo.c

[cas-user] Re: How to configure keycloak / CSRF exception

2020-01-09 Thread craab
Àdding Google as IDP doesn't work as well. DEBUG [org.pac4j.oauth.credentials.extractor.OAuth20CredentialsExtractor] - INFO [org.pac4j.oauth.client.Google2Client] - The session has ended after redirect. I found, that when cas is not running on default ports, this problem occurs. But setting

[cas-user] Re: How to configure keycloak / CSRF exception

2020-01-07 Thread craab
I am running 6.1.2 btw -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group.

[cas-user] How to configure keycloak / CSRF exception

2020-01-07 Thread craab
I have set up CAS with LDAP, database authentication, but I am unable to set up keycloak correctly. >From the /login page, I am correctly redirected to my keycloak login page. I sign in and am redirected back to CAS, but get this exception: org.springframework.webflow.execution.ActionExecutionE

Re: [cas-user] Example config for authing against Azure / O365?

2019-12-30 Thread craab
Where you able to solve this issue? I'm having the same problem. The state parameter is on the request url but not in the session. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/m

Re: [cas-user] Example config for authing against Azure / O365?

2019-12-30 Thread craab
Where you able to solve this issue? I'm having the same problem. The state parameter is on the request url but not in the session. Am Montag, 3. Juni 2019 22:45:15 UTC+2 schrieb Łukasz Woźniak: > > When user open CAS state parameter is set on the session, but when user > comeback from Azure/Open