I'm trying to configure CAS 5.3.3 as a SAML IdP. That part seems to work, 
but I want it to delegate authentication to an existing CAS server, but 
doing that it forgets to reply to the SP in SAML, and instead sends a CAS 
service ticket.

Before the CAS/IdP has a session for the user it breaks, forgetting to 
reply in saml:
SP =(saml)=> CAS/Idp =(cas)=> CAS =(cas)=> CAS/Idp =(cas!!)=> SP

Then trying again now that the CAS/IdP has a session for the user it works:
SP =(saml)=> CAS/IdP =(saml)=> SP

The IdP works.
The delegated auth to cas works.
Doing them together, how my users would, doesn't work.

Is this a bug?
Is there something I have to configure to get it to resume with saml when 
it has to do the delegated auth?

Thanks,
Jon

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/31c92cbc-dfbe-45d9-b2b8-d8e14eed376e%40apereo.org.

Reply via email to