I am planning to add a new, so I think, ticket expiration policy for our
app.

My requirement is that CAS should expire tickets when all of the clients,
using certain ticket, timeouts.

An example scenario would be  ;
A user logins to web applications A and B.
Application A timeouts eventually. CAS should not expire the ticket.
Application B timeouts. Since the user is timeouted from all the apps now
CAS should expire the ticket.

I am thinking that it should be doable by registering the session Id's of
the apps with the CAS ticket. And the expiration policy should check if the
all applications timeouted associated with the ticket. First use of the
ticket should be omitted from above.

Did anybody required or did a similar thing ? Does a such policy already
exists ? What do you think ?

I hope I could have been clear enough.

Thanks,

-- 
Murat Can ALPAY
http://mcatr.blogspot.com

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to