[cas-user] Re: groovyScript: expecting String concatenation, getting array?

2020-05-07 Thread Misagh Moayyed
Try: "groovy { return attributes['wcWhitmanId'][0] + '@whitman.edu' }" "wcWhitmanId'" is resolved internally as a multi-valued attribute. On Thursday, May 7, 2020 at 6:03:11 AM UTC+4:30, Mike Osterman wrote: > > Hi all, > > I'm setting up a SAML2 service and running into unexpected behavior

[cas-user] Cas 6.1.x Web Flow Customization

2020-05-07 Thread 'Suhas Bansude' via CAS Community
I am using cas 6.1.x version . I am trying to configure login web flow. Please help with -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message

[cas-user] Looking for IAM solution

2020-05-07 Thread Kazim Koybasi
Hello, We are looking for an open source or proprietary IAM solution to use in our university infrastructure but we are using CAS for our SSO solution. We do not want to replace it so we want to use IAM together with CAS. Do you have any suggestions for opensource and proprietary solution that

Re: [cas-user] Looking for IAM solution

2020-05-07 Thread Fabio Martelli
Hi Kazim, can I suggest a fully completed solution based on Apache Syncope and Apereo CAS? Please let me know if you need more info/details Regards, F. Il gio 7 mag 2020, 12:32 Kazim Koybasi ha scritto: > Hello, > > We are looking for an open source or proprietary IAM solution to use in > our

[cas-user] JDBC Connection Pooling

2020-05-07 Thread Lars Feistner
Hi all, I have multiple jdbc attributeRepositories that connect to the same DB. Thus I just found out that each attributeRepository is using its own Hikari ConnectionPool which makes sense if all would connect with different Databases. In my case this is overhead. Can I configure cas in a

Re: [cas-user] Cas 6.1.x Web Flow Customization

2020-05-07 Thread Dmitriy Kopylenko
Hi there. I’d suggest you be a bit more specific regarding what you are trying to accomplish. Best, D. On May 7, 2020 at 04:16:28, 'Suhas Bansude' via CAS Community (cas-user@apereo.org) wrote: I am using cas 6.1.x version . I am trying to configure login web flow. Please help with -- -

Re: [cas-user] Looking for IAM solution

2020-05-07 Thread Kazim Koybasi
Hello Fabio, Sure. Can you provide more information about it ? Regards. On Thu, 7 May 2020 at 14:08, Fabio Martelli wrote: > Hi Kazim, can I suggest a fully completed solution based on Apache Syncope > and Apereo CAS? > > Please let me know if you need more info/details > > Regards, > F. > >

RE: [cas-user] Cas 6.1.x Web Flow Customization

2020-05-07 Thread 'Suhas Bansude' via CAS Community
Thanks for response I have 3 different projects. I want to connect these project with the help of cas server. And avoid user to login concurrently among all these project. After login success I want to add custom concurrent login check. If concurrent login found I have to show logout previous

[cas-user] Re: Can Apereo CAS redirect user to login page if got unrecognized ticket?

2020-05-07 Thread 'Maksim Kopeyka' via CAS Community
I recommend to use hazelcast cas ticket registry. In this case all nodes will have information about all tickets. So you don't need sticky sessions in this case. On Thursday, April 23, 2020 at 3:30:25 PM UTC+3, Сергей Степанов wrote: > > Hello! I need your help. > > > > I have several nodes

RE: [cas-user] Cas 6.1.x Web Flow Customization

2020-05-07 Thread Dmitriy Kopylenko
This might help: https://apereo.github.io/2017/10/07/webflow-extcfg/ It talks about CAS5, but in modern CAS the mechanics are the same. If all else fails, you might want to dive deep into CAS internals and study how CAS does SWF configuration with its various modules that configure their SWF in

Re: [cas-user] JDBC Connection Pooling

2020-05-07 Thread Dmitriy Kopylenko
Indeed, that might be a good idea to reuse a global DataSource for all Jdbc attributes repos. Currently it’s only possible if you have a globally defined JNDI-bound DataSource (but who does JNDI these days?) ;-)  As could be seen here: 

Re: [cas-user] Looking for IAM solution

2020-05-07 Thread Petr Gašparík - AMI Praha a . s .
Second option (IMHO better, but that's point of view) is to use Evolveum's midPoint. It possesses a flexible authentication mechanism ( https://wiki.evolveum.com/display/midPoint/Flexible+Authentication+Configuration), so you can use Apereo CAS as SAML IdP and Evolveum midPoint as SAML SP, for

Re: [cas-user] Looking for IAM solution

2020-05-07 Thread Fabio Martelli
Il 07/05/20 13:25, Kazim Koybasi ha scritto: Hello Fabio, Sure. Can you provide more information about it ? Hi Kazim, thank you for your question. First of all, a very brief introduction about Apache Syncope [1]. Apache Syncope is an Open Source Identity Management software. Syncope allows

Re: [cas-user] Re: groovyScript: expecting String concatenation, getting array?

2020-05-07 Thread Mike Osterman
That did it--thanks! On Thu, May 7, 2020 at 1:04 AM Misagh Moayyed wrote: > Try: > > "groovy { return attributes['wcWhitmanId'][0] + '@whitman.edu' }" > > "wcWhitmanId'" is resolved internally as a multi-valued attribute. > > > On Thursday, May 7, 2020 at 6:03:11 AM UTC+4:30, Mike Osterman

Re: [cas-user] LDAP timeouts after Java upgrade

2020-05-07 Thread Daniel Fisher
On Wed, May 6, 2020 at 2:41 PM Baron Fujimoto wrote: > So judging by the DEBUG timestamps, only 4 ms elapses between the start of > the AuthN attempt and the SearchValidator timeout failure. Should I try to > corroborate this vis LDAP logs? > Couldn't hurt, but I wonder if there is some other