> Even if > the ticket is validated it is the services which determines the access for > the user.
If you mean that the service could choose to ignore a validation failure, or conversely, to deny a success, then the service is ultimately in control. Services must be designed to collaborate with the protocol; this is no different than any other protocol that requires participants to agree to the terms of the protocol for proper behavior. M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
