ForceAuth is supported by pac4j at the moment; CAS is not leveraging it. Passive Auth is hardcoded by pac4j as false, always. If you were to do this, you would need to modify pac4j to expose a setting for passive auth, and then modify CAS to set those two flags based on settings you define which would take on the form of cas.authn.pac4j.saml[0].forceAuth=true/false and cas.authn.pac4j.saml[0].passive=true/false.
--Misagh On July 11, 2017 at 12:33:04 PM, Fabio Martelli ([email protected]) wrote: Hi All, I'm working to configure my CAS 5.1.1 in order to delegate the authentication to an external SAML2 identity provider. I successfully configured this scenario just by adding pac4j-webflow dependency + by including into my cas.properties file some cas.authn.pac4j.saml[0].* properties (as per the documentation). Unfortunately, some important aspects are missing in order to be fully compliant with the specification of my Identity Provider. I'm asking if there is a way to have more control in generating metadata and AuthnRequest. For instance, I would have the possibility to specify ForceAuthn and IsPassive AuthnRequest attributes. Is there a way, the right way, to do this? Please, let me know. Thank you in advance. Best regards, F. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/2574eee1-14fd-45a9-9769-a9726b3e72f6%40apereo.org. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.59655cb4.183471e.56e%40unicon.net.
