Re: [cas-user] Blackboard Ultra

2018-01-31 Thread Michael O Holstein
lstein CISSP Cleveland State University From: cas-user@apereo.org on behalf of Richard Frovarp Sent: Tuesday, January 30, 2018 6:27:29 PM To: cas-user@apereo.org Subject: Re: [cas-user] Blackboard Ultra I think that they are. From my recollection that was what came up on the Bb admin

Re: [cas-user] Blackboard Ultra

2018-01-31 Thread Michael O Holstein
206-xxx-casvm2 <29 GET ST-135206-xxx-casvm2 <-- fails <29 GET ST-135206-xxx-casvm2 <-- fails <29 GET ST-135206-xxx-casvm2 <-- fails From: cas-user@apereo.org on behalf of Ray Bon Sent: Tuesday, January 30, 2018 12:38:04 PM To: cas-user

Re: [cas-user] Blackboard Ultra

2018-01-31 Thread Michael O Holstein
n behalf of Richard Frovarp Sent: Tuesday, January 30, 2018 10:42:04 AM To: cas-user@apereo.org Subject: Re: [cas-user] Blackboard Ultra Do you have a logout URL configured? Best I know is that when a session expires in Bb, it kills the Bb session, then sends the browser to the IdP logout URL, wh

Re: [cas-user] Blackboard Ultra

2018-01-30 Thread Bryan Wooten
"I certainly hope that Bb is not sending a logout request to CAS when 'its' session expires (not user initiated). That would single logout the user out of all services (that participate in SLO) regardless of CAS settings ==> unhappy users & confused administrators." This topic begs the question: W

Re: [cas-user] Blackboard Ultra

2018-01-30 Thread Richard Frovarp
I think that they are. From my recollection that was what came up on the Bb admin list a couple of years ago. You have to specify a logout URL, and it sends the user to it after it kills its own session. People are providing the IdP logout URL, so that kicks it off. My suggestion would be to pr

Re: [cas-user] Blackboard Ultra

2018-01-30 Thread Ray Bon
I certainly hope that Bb is not sending a logout request to CAS when 'its' session expires (not user initiated). That would single logout the user out of all services (that participate in SLO) regardless of CAS settings ==> unhappy users & confused administrators. Ray On Tue, 2018-01-30 at 09:

Re: [cas-user] Blackboard Ultra

2018-01-30 Thread Ray Bon
Michael, Default lifetime of a TGT is 2h. See https://apereo.github.io/cas/5.2.x/installation/Configuring-Ticket-Expiration-Policy.html The TGT may still be present in the ticket store, depends on the storage mechanism. Ray On Tue, 2018-01-30 at 13:08 +, Michael O Holstein wrote: We recen

Re: [cas-user] Blackboard Ultra

2018-01-30 Thread Richard Frovarp
Do you have a logout URL configured? Best I know is that when a session expires in Bb, it kills the Bb session, then sends the browser to the IdP logout URL, which would kill your TGT. On 01/30/2018 07:08 AM, Michael O Holstein wrote: We recently moved onto Blackboard's SaaS offering (aka "Ul

[cas-user] Blackboard Ultra

2018-01-30 Thread Michael O Holstein
We recently moved onto Blackboard's SaaS offering (aka "Ultra") and random users are telling us it times out of them. While I suspect this is an issue of opening the app, letting it sit for 2 hours, and then noticing their session went away (which should re-auth as the TGT is still valid on our