Hi Curtis,

Please disregard my answer, I was thinking AUP is an authentication method 
and it is not, ops. Maybe other can help instead. 

- Andy 

On Friday, 31 August 2018 14:58:20 UTC+8, Andy Ng wrote:
>
> Hi Curtis,
>
> I didn't use either AUP or X509 as my authentication webflow myself, so I 
> won't comment on whether or not either of the authentication have bugs or 
> not.
>
> However, it seems like you might have set the *CAS* *authentication 
> policy* to *Any* (See 
> https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html#authentication-policy
> ), 
> Any is the default authentication policy in CAS so you might not even 
> realize you have set it to that.
>
> I think you might want to set *CAS* *authentication policy* to *All*, 
> (put "*cas.authn.policy.all.enabled=true*" into your cas.properties if 
> you are using CAS 5.3.x)
>
> Read this (
> https://apereo.github.io/cas/5.3.x/installation/Configuring-Authentication-Components.html#authentication-policy)
>  
> or see below (highly simplified) graph for the difference in CAS 
> authentication policy All vs Any
>
> [image: temp.png]
>
>
>
>
>
>
>
>
>
>
> I am using LDAP and Database as an example, but for your case should be 
> AUP & X509. As you can see set CAS authentication policy to All seems to 
> match your requirement.
>
> See if the above helps you!
>
> Cheers!
> -Andy
>
>
> On Wednesday, 29 August 2018 21:11:44 UTC+8, Curtis Ruck wrote:
>>
>> I'm trying to configure the aup-webflow and x509-webflow.  It seems that 
>> when a user logs in with username/password they hit the aup-webflow, but 
>> when a user logs in with x509 it skips the AUP flow.
>>
>> I don't understand spring webflow, and have no clue what i'm looking for 
>> or at, but it seems that either the x509 webflow completely skips aup, or 
>> the aup webflow is somehow transitioning past the aup view.
>>
>> I'm not using an AUP persistence (intentionally), so the AUP already 
>> accepted is only kept in memory.
>>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/59862239-3b52-4872-9883-782fd1bb42d7%40apereo.org.

Reply via email to