Proxy Tickets only come into play if the "main site" is interacting with "forum" site via backchannel https calls. The CAS server is not normally checked for every request. Application session management is the responsibility of the application.
That being said, you should take a look Single Sign Out (aka Single Log out) to achieve the behavior you've described: https://wiki.jasig.org/display/CASUM/Single+Sign+Out Best, Bill On Wed, Dec 28, 2011 at 6:24 AM, Amr Mohamed Mahmoud Hassanien <[email protected]> wrote: > Dear All, > > > > We are using cas for SSO between two application and we > implemented it in a way that one application is the main site and the other > is casified (forum) so that the user has to log in to the main site first. > > The problem is if the user logouts about from The main site (which means > from CAS as well), he stay logged in to the other casified site(forum) > because the CASFilter keeps the CASReceipt in the session and never checks > with cas server whether the user still logged in or not. > > > > I have considered implementing proxy granting ticket in casifying the > secondary app (forum), thinking that this way, cas server will be checked > with every request the (forum) receive. > > > > Please Advise if proxy granting ticket could be really a solution for that, > because if it is a solution I have more questions to ask J. > > > > Regards, > > Amr Hassanin > > P Please consider the environment before printing this email > > > > DISCLAIMER: > > This message is for the named person's use only. It may contain > confidential information, proprietary in nature or legally privileged > information. All trade secret, know how, formulas, researches, database, > software, codes diagrams, documentations, attachments, voice, concepts and > visual content are strictly protected by United Arab Emirates Laws and Dubai > Media Incorporated codes which will have the right to take any legal action > if you fail in doing the hereunder steps. > > If you receive this message in error, please immediately DELETE it and all > copies of it from your system, DESTROY any hard copies of it and destroy any > soft and backup copy of it saved in any kind of form under you possession > and NOTIFY the sender. You must not, directly or indirectly, use, disclose, > distribute, print, or copy any part of this message (email) if you are not > the intended recipient. > > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
