[cas-user] CAS 5.3.5 Authorization Interrupt & REST

Greetings. I am looking for some sort of documentation or other source of help for how to properly use the Authorization Interrupt with a REST page response. I am able to see the CAS server calling my REST application, and I am able to appropriately process the call on the application, and

Re: [cas-user] CAS 5.3.5 Authorization Interrupt & REST

;ssoEnabled": false > } > > The 200 Ok response tells CAS to interrupt, but then it can't find the > data elements it expects. > > -dirk > On Mon, Oct 29, 2018 at 4:43 PM Shawn Cutting > wrote: > >> Greetings. >> >> I am looking for some so

[cas-user] Re: CAS Management v5.3.6 Release

Is the search functionality limited to "whole word" searches? It would be nice if the search can find partial words as well. On Friday, November 2, 2018 at 1:57:01 PM UTC-4, Travis Schmidt wrote: > > CAS Management v5.3.6 has been released: >

[cas-user] status/refresh

Good day. I am trying to implement the "/cas/status/refresh" feature of CAS 5.3.5, and I have it configured to use security.basic as follows: endpoints.enabled=true endpoints.refresh.enabled=true security.basic.authorizeMode=authenticated security.basic.enabled=true

[cas-user] Google Auth and REST

I am trying to implement Google Authenticator as our MFA, and I am able to get everything working if I use the JSON method. However, I want to be able to store the validation information for the users in a MySQL database, and I figure the best way to do that is by using a custom REST page.

[cas-user] Re: CAS Interrupt Misunderstanding

:39:17 AM UTC-5, Shawn Cutting wrote: > > Good morning, > I am trying to create a dynamic interrupt page and I think I am > misunderstanding what the "ssoEnabled" setting does. From the > documentation, it seems that if this is set to true, then it would give a

[cas-user] CAS Interrupt Misunderstanding

Good morning, I am trying to create a dynamic interrupt page and I think I am misunderstanding what the "ssoEnabled" setting does. From the documentation, it seems that if this is set to true, then it would give a service ticket despite the action that would be taken on the interrupt page.

[cas-user] Unable to build 5.3 SAML as IdP

Greetings, I have been banging my head against a wall for the past few weeks trying to figure out why I cannot build a functional CAS instance with SAML IdP. When I run "build.sh package", I get the following error: [ERROR] Failed to execute goal on project cas-overlay: Could not resolve

[cas-user] Re: Google Autenticator Error

ion at all. If anyone has had any success with REST and google authenticator/trusted devices, I could sure use the help. Shawn On Sunday, August 11, 2019 at 8:51:49 PM UTC-4, Shawn Cutting wrote: > > I was able to figure out how to get the Google Authenticator working with > a REST call (to

[cas-user] Re: Google Autenticator Error

). Any help would be appreciated. Thanks! Shawn On Friday, August 9, 2019 at 9:13:18 AM UTC-4, Shawn Cutting wrote: > > I am trying to get CAS 5.3.9 working with Google Authenticator MFA, but I am > getting the following error: > > Error: Exception t

[cas-user] Re: Google Auth and REST

Bumping to see if anyone has any advice. Thanks! On Tuesday, December 18, 2018 at 12:26:22 PM UTC-5, Shawn Cutting wrote: > > I am trying to implement Google Authenticator as our MFA, and I am able to > get everything working if I use the JSON method. However, I want to be > a

[cas-user] Google Autenticator Error

I am trying to get CAS 5.3.9 working with Google Authenticator MFA, but I am getting the following error: Error: Exception thrown executing org.apereo.cas.trusted.web.flow.MultifactorAuthenticationVerifyTrustAction@7b20419f in state 'verifyTrustedDevice' of flow 'mfa-gauth' -- action

Re: [cas-user] OpenID Connect issues

Ok, this is strange. I am not sure why the error is giving /etc/cas/jwks/keystore.jwks when that is not in the config. I did have it there at one point, but why did it persist after I restarted the service? On Tuesday, September 24, 2019 at 10:59:05 AM UTC-4, Shawn Cutting wrote

[cas-user] OpenID Connect issues

I am trying to setup CAS to function as an OpenID provider, and am running into a roadblock. When I attempt to retrieve the jwks info, I am hit with the following error in the log: java.io.FileNotFoundException: Could not open ServletContext resource [/etc/cas/jwks/keystore.jwks] at

Re: [cas-user] OpenID Connect issues

the properties setting, etc. > > D. > > > > > From: Shawn Cutting > Reply: Shawn Cutting > Date: September 24, 2019 at 11:03:42 AM > To: CAS Community > Cc: dkopy...@unicon.net > Subject: Re: [cas-user] OpenID Connect issues > > Ok, this is

[cas-user] Service Registry in MongoDB (with replication)

Good morning, I am at a total loss here about how to get CAS services to load from (and to) MongoDB. Following the instructions on David Curry's site (very well written, by the way), I have the mongodb server

[cas-user] Re: Service Registry in MongoDB (with replication)

:56 AM UTC-5, Shawn Cutting wrote: > > Good morning, > > I am at a total loss here about how to get CAS services to load from (and > to) MongoDB. Following the instructions on David Curry's site > <https://dacurry-tns.github.io/deploying-apereo-cas/high-avail_overview.html>

[cas-user] Re: Service Registry in MongoDB (with replication)

r 14, 2019 at 10:53:56 AM UTC-5, Shawn Cutting wrote: > > Good morning, > > I am at a total loss here about how to get CAS services to load from (and > to) MongoDB. Following the instructions on David Curry's site > <https://dacurry-tns.github.io/deploying-apereo-cas/high-ava

Re: [cas-user] Service Registry in MongoDB (with replication)

. > > --Dave > > -- > > DAVID A. CURRY, CISSP > *DIRECTOR • INFORMATION SECURITY & PRIVACY* > THE NEW SCHOOL • INFORMATION TECHNOLOGY > > 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 > +1 646 909-4728 • david...@newschool.edu > > > On Thu, Nov 14, 2019 at 10:5

Re: [cas-user] Service Registry in MongoDB (with replication)

-management]] Thoughts? On Thursday, November 14, 2019 at 3:06:26 PM UTC-5, Shawn Cutting wrote: > > No, I don't. Every time I try to add it to the management pom, it will > not start with Tomcat. Is there another dependency that I need or a config > setting that keeps it from loading?

Re: [cas-user] Service Registry in MongoDB (with replication)

, 2019 at 4:10:46 PM UTC-5, Shawn Cutting wrote: > > I watched the catalina log and found this error when the management app > was loading: > > java.lang.IllegalStateException: ContainerBase.addChild: start: > org.apache.catalina.LifecycleException: Failed to start component

[cas-user] Re: Service Registry in MongoDB (with replication)

ars created by the pom build were getting added to the webapps folder. Once I set everything back to the original, and deleted the appropriate folder, it came up. Ugh! Thanks for your help! Shawn On Thursday, November 14, 2019 at 10:53:56 AM UTC-5, Shawn Cutting wrote: > > Good morning,

[cas-user] MFA Trusted Devices and Public Machines

Good Day, I am trying to get one last piece of our CAS 5.3 MFA setup and I am hitting a roadblock. I have cas.authn.mfa.gauth.trustedDeviceEnabled=true, and everything works as it should (I am writing MFA info to a MySQL database) when it asks for a device name. The issue is that I want to

[cas-user] Re: CAS V5.3 with Zoom SSO???

We are using pure SAML with Zoom, and it was not the easiest thingto setup, but it is working. What have you tried thus far? On Tuesday, May 12, 2020 at 5:37:03 PM UTC-4, Keith Alston (Staff) wrote: > > Anyone set up Zoom SSO with CAS?? Any pointers/tips?? > > > > -Keith Alston > >

[cas-user] Re: MFA Trusted Devices and Public Machines

ng me from progressing. Thanks again, gents! Shawn On Monday, May 4, 2020 at 1:06:36 PM UTC-4, Shawn Cutting wrote: > > Good Day, > > I am trying to get one last piece of our CAS 5.3 MFA setup and I am > hitting a roadblock. I have cas.authn.mfa.gauth.trustedDeviceEnabled=true

[cas-user] Use of # in service URL

Good Day, I am running into an issue with a service URL that includes a "#"... example like this: https://service-site.com/#/login-page The issue is that after CAS authenticates, it is returning the URL of: https://service-site.com/?ticket=ST-370468-randomticketstuff#/login-page (note the