Carlos,

Currently the CAS 2 protocol does not explicitly return the value.  You have
two options:
1. If you have made a decision about enforcing the renew=true, then you can
send the renew=true parameter along with your validation and a successful
validation response will only be returned if its from a new authentication.

2. If you just want to know for informational purposes, then you would have
to modify the JSPs that create the response to include an additional XML
attribute that specifies whether renew=true. You'd have to modify the client
to understand this.

-Scott

On 3/14/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:

I am sorry if this is has been asked and answered a few times on the
board already.  SSO/CAS terminology is a little new to me.

When a web application validates a ticket with CAS, is it possible to
determine if this ticket was generated from a new primary authentication
(e.g. user just interacted with the CAS server login form) or the result
of an existing SSO authentication (e.g. user logged in 30 minutes ago
with CAS)?

I only know enough about spring webFlow to be dangerous, but I can see
how I can step into a few of these places to determine if a successful
login submission has occurred or if CAS is relying on a prior ticket.
But that seems painful.

Carlos
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas




--
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to