It means what it says i.e. the order in which the configured service definitions are matched to the supplied service. You may want to configure , for example, a restrictive regex match, followed by a more generic one. This ordering can be achieved by evaluation order.
regards, Kartik On Fri, Jul 7, 2017 at 3:58 PM, kjlorenzo <[email protected]> wrote: > Hello! > > Could someone explain the use of value (evaluationOrder) in services. > > The documentation explains: > > *evaluationOrder -->* > > > > *Required value that determines relative order of evaluation of > registered services. This flag is particularly important in cases where > two service URL expressions cover the same services; evaluation order > determines which registration is evaluated first.* > I understand that if I have 2 defined services: > > Service 1 > > service1-10000001.json > { > "@class" : "org.jasig.cas.services.RegexRegisteredService", > "serviceId" : "^https://mydomain.org/servicio1.*";, > "name" : "HTTPS and HTTP Test", > "id" : 10000001, > "description" : "Test service which releases all attributes.", > "proxyPolicy" : { > "@class" : "org.jasig.cas.services.RefuseRegisteredServiceProxyPolicy" > }, > > "evaluationOrder" : 1, > "usernameAttributeProvider" : { > "@class" : > "org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider", > "usernameAttribute" : "*PrincipalA*", > }, > "logoutType" : "BACK_CHANNEL", > "attributeReleasePolicy" : { > "@class" : "org.jasig.cas.services.ReturnAllAttributeReleasePolicy" > }, > "accessStrategy" : { > "@class" : "org.jasig.cas.services.DefaultRegisteredServiceAccessStrategy", > "enabled" : true, > "ssoEnabled" : true > } > } > > Service 2 > > service2-10000002.json > { > "@class" : "org.jasig.cas.services.RegexRegisteredService", > "serviceId" : "^https://mydomain.org/servicio1.*";, > "name" : "HTTPS and HTTP Test", > "id" : 10000002, > "description" : "Test service which releases all attributes.", > "proxyPolicy" : { > "@class" : "org.jasig.cas.services.RefuseRegisteredServiceProxyPolicy" > }, > > "evaluationOrder" : 2, > "usernameAttributeProvider" : { > "@class" : > "org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider", > "usernameAttribute" : "*PrincipalB*", > }, > "logoutType" : "BACK_CHANNEL", > "attributeReleasePolicy" : { > "@class" : "org.jasig.cas.services.ReturnAllAttributeReleasePolicy" > }, > "accessStrategy" : { > "@class" : "org.jasig.cas.services.DefaultRegisteredServiceAccessStrategy", > "enabled" : true, > "ssoEnabled" : true > } > } > > > > > *When the user accesses the service, if it authenticates with ldapX (service > evaluationOrder 1) it returns PrinciaplA. > But if it authenticates with ldapXX (service2 evaluationOrder 2) it returns > PrincipalB.*Thank's. > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: https://apereo.github.io/cas/ > Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/8489f220-8306-483b-9981- > b413c96de4ce%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/8489f220-8306-483b-9981-b413c96de4ce%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAGg9WmzmyJqnOZ%3DN%2B01sC8JEkA9bwv9XUCKoTNWKF662QOgi1Q%40mail.gmail.com.
