Re-posting this in cas-user.  Mistakenly posted in cas-dev last week.

Update: I tried setting ssoEnabled to true as Misagh suggested, and I am 
still getting prompted for user ID and password.

I am using CAS 4.1.4 (using Maven Overlay) with Tomcat 8.0.26.

I am struggling with allowing anonymous access to a particular web 
application with the context root of "keepalive".

I keep getting prompted for the SSO login page.  I have looked on the Wiki 
and cannot find info on this: https://jasig.github.io/cas/4.1.x/index.html

The rest of my applications are protected with CAS SSO.  That part works 
fine.

I am certain this is something I am doing incorrectly. 

Is this something I need to configure in CAS securityContext.xml?  Or, is 
this configured in the .json file for the registered service?

The .json file for this service is below.  I have set the ssoEnabled 
attribute to false on the access strategy:

{
  "@class" : "org.jasig.cas.services.RegexRegisteredService",
  "serviceId" : "https://localhost:8443/keepalive.*";,
  "name" : "Keepalive Application",
  "id" : 103479920584348,
  "description" : "Keepalive Application",
  "proxyPolicy" : {
    "@class" : "org.jasig.cas.services.RefuseRegisteredServiceProxyPolicy"
  },
  "evaluationOrder" : 1,
  "usernameAttributeProvider" : {
    "@class" : 
"org.jasig.cas.services.AnonymousRegisteredServiceUsernameAttributeProvider",
    "persistentIdGenerator" : {
      "@class" : 
"org.jasig.cas.authentication.principal.ShibbolethCompatiblePersistentIdGenerator",
      "salt" : "Salty"
    }
  },
  "logoutType" : "BACK_CHANNEL",
  "attributeReleasePolicy" : {
    "@class" : "org.jasig.cas.services.ReturnAllowedAttributeReleasePolicy",
    "principalAttributesRepository" : {
      "@class" : 
"org.jasig.cas.authentication.principal.DefaultPrincipalAttributesRepository"
    },
    "authorizedToReleaseCredentialPassword" : false,
    "authorizedToReleaseProxyGrantingTicket" : false
  },
  "accessStrategy" : {
    "@class" : 
"org.jasig.cas.services.DefaultRegisteredServiceAccessStrategy",
    "enabled" : true,
    "ssoEnabled" : *true*,
    "requireAllAttributes" : false
  }
}

Thank you.

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.

Reply via email to