Copy-pasting my answer from SO (https://stackoverflow.com/a/60043484/7309237):
I had the same problem and managed to handle it with v6.2.0-RC2 version of cas. After adding cas.authn.pac4j.replicateSessions=false into my etc/cas/config/cas.properties it fixed problem for me. From https://github.com/apereo/cas/blob/v6.2.0-RC2/docs/cas-server-documentation/configuration/Configuration-Properties.md#pac4j-delegated-authn : # cas.authn.pac4j.typedIdUsed=false # cas.authn.pac4j.principalAttributeId= # cas.authn.pac4j.name= # cas.authn.pac4j.order= # cas.authn.pac4j.lazyInit=true # cas.authn.pac4j.replicateSessions=true From https://github.com/apereo/cas/blob/v6.2.0-RC2/api/cas-server-core-api-configuration-model/src/main/java/org/apereo/cas/configuration/model/support/pac4j/Pac4jDelegatedAuthenticationProperties.java#L58 : /** * Indicates whether profiles and other session data, * collected as part of pac4j flows and requests * that are kept by the container session, should be replicated * across the cluster using CAS and its own ticket registry. * Without this option, profile data and other related * pieces of information should be manually replicated * via means and libraries outside of CAS. */ private boolean replicateSessions = true; *Warning* - Default value for this property is true and changing to false is not recommented for clusters. W dniu wtorek, 14 stycznia 2020 08:36:44 UTC+1 użytkownik craab napisał: > > Greating. I have found an issue and don't know, if it is a bug or intended. > > I added ldap and keycloak via > org.apereo.cas:cas-server-support-openid-webflow:${project.'cas.version'} > > and > org.apereo.cas:cas-server-support-ldap:${project.'cas.version'} > > That works. But as soon as I add > org.apereo.cas:cas-server-support-oauth-webflow:${project.'cas.version'} > > to add OAuth communication for my client, this breaks keycloak (and any > other pac4j service, like Google OAuth). > > Anyone ever heard of this? Is CAS not meant to support Token Tickets and > Pac4J/OpenID at the same time? > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/e0dcad32-c636-4e39-a8e2-bcdd9770cb58%40apereo.org.
