[cas-user] app not authorized error with IdP initiated SAML SSO

Hi, I am on CAS 6.4.x. Two apps, appA, authenticated by Okta, and appB, authenticated by CAS, cas delegates authN to Okta for appB. This is working correctly: I login to appA via Okta, when I got to appB URL, SSO happens. If I go straight to appB without login to Okta first, delegated

[cas-user] Using the username field pre-authentication to do home realm discovery?

Hi. I'm curious if CAS can be used to do home realm discovery after the user enters their username? My proposed workflow would be: 1. User enters a username 2. The authentication strategy would depend on what the user entered by looking up the username with a REST service (or some other

[cas-user] CAS 6.x and above no longer checks release policy attributes before creating PT - is this a bug?

Hi, it looks like somewhere between CAS 5.x and CAS 6.x (currently testing with CAS 6.6.9), the code that fetched user attributes from registered-service-defined release policy got removed from within the *grantProxyTicket()* method of *DefaultCentralAuthenticationService*. As a result, user