Hi Curtis, I didn't use either AUP or X509 as my authentication webflow myself, so I won't comment on whether or not either of the authentication have bugs or not.
However, it seems like you might have set the *CAS* *authentication policy* to *Any* (See https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html#authentication-policy), Any is the default authentication policy in CAS so you might not even realize you have set it to that. I think you might want to set *CAS* *authentication policy* to *All*, (put " *cas.authn.policy.all.enabled=true*" into your cas.properties if you are using CAS 5.3.x) Read this (https://apereo.github.io/cas/5.3.x/installation/Configuring-Authentication-Components.html#authentication-policy) or see below (highly simplified) graph for the difference in CAS authentication policy All vs Any [image: temp.png] <about:invalid#zClosurez> I am using LDAP and Database as an example, but for your case should be AUP & X509. As you can see set CAS authentication policy to All seems to match your requirement. See if the above helps you! Cheers! -Andy On Wednesday, 29 August 2018 21:11:44 UTC+8, Curtis Ruck wrote: > > I'm trying to configure the aup-webflow and x509-webflow. It seems that > when a user logs in with username/password they hit the aup-webflow, but > when a user logs in with x509 it skips the AUP flow. > > I don't understand spring webflow, and have no clue what i'm looking for > or at, but it seems that either the x509 webflow completely skips aup, or > the aup webflow is somehow transitioning past the aup view. > > I'm not using an AUP persistence (intentionally), so the AUP already > accepted is only kept in memory. > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/13c84825-ef0e-46c4-a95c-23316865d76e%40apereo.org.
