Il 12/07/2017 01:18, Misagh Moayyed ha scritto:
ForceAuth is supported by pac4j at the moment; CAS is not leveraging
it. Passive Auth is hardcoded by pac4j as false, always. If you were
to do this, you would need to modify pac4j to expose a setting for
passive auth, and then modify CAS to set those two flags based on
settings you define which would take on the form of
cas.authn.pac4j.saml[0].forceAuth=true/false and
cas.authn.pac4j.saml[0].passive=true/false.
Hi Misagh, thank you for your prompt reply.
Please, could you address me to the classes of CAS that I have to
dealing with?
For pac4j I think I have to change into Pac4jProperties$Saml, haven't I?
Thank you again for your reply.
BR,
F.
--Misagh
On July 11, 2017 at 12:33:04 PM, Fabio Martelli
([email protected] <mailto:[email protected]>) wrote:
Hi All, I'm working to configure my CAS 5.1.1 in order to delegate
the authentication to an external SAML2 identity provider.
I successfully configured this scenario just by adding pac4j-webflow
dependency + by including into my cas.properties file some
cas.authn.pac4j.saml[0].* properties (as per the documentation).
Unfortunately, some important aspects are missing in order to be
fully compliant with the specification of my Identity Provider.
I'm asking if there is a way to have more control in generating
metadata and AuthnRequest.
For instance, I would have the possibility to specify ForceAuthn and
IsPassive AuthnRequest attributes. Is there a way, the right way, to
do this?
Please, let me know.
Thank you in advance.
Best regards,
F.
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines:
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected]
<mailto:[email protected]>.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/2574eee1-14fd-45a9-9769-a9726b3e72f6%40apereo.org
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/2574eee1-14fd-45a9-9769-a9726b3e72f6%40apereo.org?utm_medium=email&utm_source=footer>.
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines:
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected]
<mailto:[email protected]>.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.59655cb4.183471e.56e%40unicon.net
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.59655cb4.183471e.56e%40unicon.net?utm_medium=email&utm_source=footer>.
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/6b005547-fdbc-820a-3bd8-8b9101f9b07e%40gmail.com.
