A 'not authorized to use CAS' message happens before authentication. This error happens on ST validation.
On Tue, 2019-01-08 at 08:36 +0100, Alberto Cabello Sánchez wrote: On Tue, 8 Jan 2019 00:50:10 +0000 Ray Bon <r...@uvic.ca<mailto:r...@uvic.ca>> wrote: Jen, The ST is being validated against a URL with GLMSSESSIONID... but this was not present with the log in request (the 2 need to match). Change the CAS client to not send GLMS... or send it with the log in request. Or maybe change the service registry id to something like https://travel.host.com:4447/tvlexp/tvlexp-flex/.* (memory may be rusty here). Hi, I don't think this will work: when service registry URL doesn't match the supplied URL, the error message is different (something like "you are not authorized to use CAS"). Greetings, -- Alberto Cabello Sánchez Servicio de Informática Universidad de Extremadura -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | r...@uvic.ca -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1546967079.5350.23.camel%40uvic.ca.
