Zach, You can collect the client address from within your app when user accesses a secure page (after log in has completed). You would need to do this anyway to know if the user has changed address.
Some browsers regularly switch proxies (e.g. Tor). Even if you only supported specific browsers, I suppose it is also possible for a proxy (which user may have to use knowingly or not) to also pass requests to other proxies. Just food for thought. Ray On Wed, 2019-01-30 at 13:10 -0800, Zach Tackett wrote: They would be logged out. Or the session would not permeate through to the application that is being used after authentication. On Wednesday, January 30, 2019 at 2:46:12 PM UTC-5, rbon wrote: Zach, On a side note, what happens when the user changes IP address (during a single session)? Ray On Wed, 2019-01-30 at 10:50 -0800, Zach Tackett wrote: Is there a way to map a logged in users client IP address to an attribute? Similar to how the UDC_ID is mapped to the employee_code cas.authn.ldap[0].principalAttributeList=sn,cn,mail,displayname,givenName,sAMAccountName,employeeID,memberOf,employeeNumber:UDC_IDENTIFIER On Tuesday, January 29, 2019 at 8:37:27 PM UTC-5, Andy Ng wrote: Hi Zach, User IP should be possible by the use of CAS Audit: https://apereo.github.io/cas/5.3.x/installation/Audits.html, if you just want to log down the IP for further processing, this should work. However, if you actually want to use IP address to prevent same IP login too many times, you can also check out this: https://apereo.github.io/cas/5.3.x/installation/Configuring-Authentication-Throttling.html See if the above can help you. Cheers! - Andy -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected]<javascript:> -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected] -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1548885061.4037.50.camel%40uvic.ca.
