Thanks William for your advice.. Now, I know that When a CAS session ends, it will callback to each of the services that are registered with the system and send a POST request
But I do not have enough information , for example, the post request is in xml ,so I donot know if I have to write my own code to read it and expire session, or that would work fine for casifyed applications without any additional work... and what about non casifyed applications? -----Original Message----- From: William G. Thompson, Jr. [mailto:[email protected]] Sent: 28 ديسمبر, 2011 06:32 م To: [email protected] Subject: Re: [cas-user] Problem implementing sso Proxy Tickets only come into play if the "main site" is interacting with "forum" site via backchannel https calls. The CAS server is not normally checked for every request. Application session management is the responsibility of the application. That being said, you should take a look Single Sign Out (aka Single Log out) to achieve the behavior you've described: https://wiki.jasig.org/display/CASUM/Single+Sign+Out Best, Bill On Wed, Dec 28, 2011 at 6:24 AM, Amr Mohamed Mahmoud Hassanien <[email protected]> wrote: > Dear All, > > > > We are using cas for SSO between two application and we > implemented it in a way that one application is the main site and the > other is casified (forum) so that the user has to log in to the main site > first. > > The problem is if the user logouts about from The main site (which > means from CAS as well), he stay logged in to the other casified > site(forum) > because the CASFilter keeps the CASReceipt in the session and never > checks with cas server whether the user still logged in or not. > > > > I have considered implementing proxy granting ticket in casifying the > secondary app (forum), thinking that this way, cas server will be > checked with every request the (forum) receive. > > > > Please Advise if proxy granting ticket could be really a solution for > that, because if it is a solution I have more questions to ask J. > > > > Regards, > > Amr Hassanin > > P Please consider the environment before printing this email > > > > DISCLAIMER: > > This message is for the named person's use only. It may contain > confidential information, proprietary in nature or legally privileged > information. All trade secret, know how, formulas, researches, > database, software, codes diagrams, documentations, attachments, > voice, concepts and visual content are strictly protected by United > Arab Emirates Laws and Dubai Media Incorporated codes which will have > the right to take any legal action if you fail in doing the hereunder steps. > > If you receive this message in error, please immediately DELETE it and > all copies of it from your system, DESTROY any hard copies of it and > destroy any soft and backup copy of it saved in any kind of form under > you possession and NOTIFY the sender. You must not, directly or > indirectly, use, disclose, distribute, print, or copy any part of this > message (email) if you are not the intended recipient. > > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user ################################################################################################################ DISCLAIMER: This message is for the named person's use only. It may contain confidential information, proprietary in nature or legally privileged information. All trade secret, know how, formulas, researches, database, software, codes diagrams, documentations, attachments, voice, concepts and visual content are strictly protected by United Arab Emirates Laws and Dubai Media Incorporated codes which will have the right to take any legal action if you fail in doing the hereunder steps. If you receive this message in error, please immediately DELETE it and all copies of it from your system, DESTROY any hard copies of it and destroy any soft and backup copy of it saved in any kind of form under you possession and NOTIFY the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message (email) if you are not the intended recipient. ################################################################################################################ -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
