Some of the CAS clients support redirect after validation to remove the
ticket. The Java one definitely does.
On Jun 9, 2011 5:30 PM, "David Crook" <[email protected]> wrote:
> Hello,
>
> I'm wondering what solutions may already exist for this -- if you have any
ideas.
>
> I have a CAS-protected application. CAS is great, but one thing I wish I
could change is that when CAS returns the authenticated user to my
application, it appends a ticket-number onto the URL in a querystring
variable.
>
> The complaint I get from my users, is that when they bookmark my app from
their browser, the bookmark doesn't work. The reason for this, which they
would not be aware of, is that by the time they use the bookmark again, the
ticket-number is expired.
>
> So far, I just tell them to manually update the properties on their
bookmark to remove the querystring portion of the URL.
>
> I've considered doing an immediate re-direct (to the same page, without
the querystring), which I think should work fine, but it does have the
drawback of loading the page twice.
>
> I don't administer CAS at my institution -- and unfortunately, our tech
support folks who administer CAS won't be much help unless I can tell them
exactly what I want them to do for me (e.g., open the file named "xyz", and
change the whatever setting to false.) I'm wondering too, though, if this is
something I can change in the web.config of my own applications.
>
> Any ideas would be appreciated.
>
> Thank you,
> - dave
>
>
> ________________________________
> Active Minds Changing Lives
>
>
> --
> You are currently subscribed to [email protected] as:
[email protected]
> To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to