Hi Curtis,

Please disregard my answer, I was thinking AUP is an authentication method 
and it is not, ops. Maybe other can help instead. 

- Andy 

On Friday, 31 August 2018 14:58:20 UTC+8, Andy Ng wrote:
>
> Hi Curtis,
>
> I didn't use either AUP or X509 as my authentication webflow myself, so I 
> won't comment on whether or not either of the authentication have bugs or 
> not.
>
> However, it seems like you might have set the *CAS* *authentication 
> policy* to *Any* (See 
> https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html#authentication-policy
> ), 
> Any is the default authentication policy in CAS so you might not even 
> realize you have set it to that.
>
> I think you might want to set *CAS* *authentication policy* to *All*, 
> (put "*cas.authn.policy.all.enabled=true*" into your cas.properties if 
> you are using CAS 5.3.x)
>
> Read this (
> https://apereo.github.io/cas/5.3.x/installation/Configuring-Authentication-Components.html#authentication-policy)
>  
> or see below (highly simplified) graph for the difference in CAS 
> authentication policy All vs Any
>
> [image: temp.png]
>
>
>
>
>
>
>
>
>
>
> I am using LDAP and Database as an example, but for your case should be 
> AUP & X509. As you can see set CAS authentication policy to All seems to 
> match your requirement.
>
> See if the above helps you!
>
> Cheers!
> -Andy
>
>
> On Wednesday, 29 August 2018 21:11:44 UTC+8, Curtis Ruck wrote:
>>
>> I'm trying to configure the aup-webflow and x509-webflow.  It seems that 
>> when a user logs in with username/password they hit the aup-webflow, but 
>> when a user logs in with x509 it skips the AUP flow.
>>
>> I don't understand spring webflow, and have no clue what i'm looking for 
>> or at, but it seems that either the x509 webflow completely skips aup, or 
>> the aup webflow is somehow transitioning past the aup view.
>>
>> I'm not using an AUP persistence (intentionally), so the AUP already 
>> accepted is only kept in memory.
>>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/59862239-3b52-4872-9883-782fd1bb42d7%40apereo.org.

Reply via email to