> We’d like to make our CAS server make an http call to our “platform” server > whenever an auth attempt is made (pass or fail).
IIRC this REST service is your authentication provider, so you simply want to call that service for every service access. Is that correct? Assuming so, there is no way to do this. In an SSO environment, the authentication handler fires on login exclusively. I imagine you don't want to burden the user with reauthentication to achieve this, so you'll have to customize CAS to support this use case. The fundamental problem you'll have to solve is a way to cache credentials to pass off to the authentication handler on every service request. Normally the credentials are provided by the Webflow, but in your case you'll have to cache them and replay them to the auth handler. Off the top of my head this sounds both difficult and ill-advised solely because of the need to cache credentials. Lots of problems can emerge from cached credential situations. M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
