Re: [cas-user] Re: CAS OKTA integration

2019-12-22 Thread Jérôme LELEU
Hi, If you use the SAML authentication delegation to Okta, there is a SAML2ClientLogoutAction component which should retrieve the user profile and send a logout request to Okta when you trigger a CAS logout (

Re: [cas-user] Re: CAS OKTA integration

2019-12-20 Thread Filip Majernik
I am using CAS 5.1.1 which comes with pac4j 2.0.0 On Friday, December 20, 2019 at 8:34:55 AM UTC+1, leleuj wrote: > > Hi, > > Which version of CAS (and pac4j) do you use? Do you have one or more CAS > servers? > Thanks. > Best regards, > Jérôme > > Le jeu. 19 déc. 2019 à 17:28, Filip Majernik >

Re: [cas-user] Re: CAS OKTA integration

2019-12-19 Thread Jérôme LELEU
Hi, Which version of CAS (and pac4j) do you use? Do you have one or more CAS servers? Thanks. Best regards, Jérôme Le jeu. 19 déc. 2019 à 17:28, Filip Majernik a écrit : > Hi Sarika, > I am facing the same issue. The SAML logout request to Okta does not work. > After debugging I have found out

[cas-user] Re: CAS OKTA integration

2019-12-19 Thread Filip Majernik
Hi Sarika, I am facing the same issue. The SAML logout request to Okta does not work. After debugging I have found out that in pac4j's implementation in SAML2LogoutRequestBuilder the UserProfile cannot be retrieved from the context, hence no sessionIndex as nameId is added to the request. This

[cas-user] Re: CAS OKTA integration

2018-09-13 Thread sarika deshmukh
Hi, Is there any update on this issue? Thanks in advance. On Tuesday, 4 September 2018 18:34:10 UTC+5:30, sarika deshmukh wrote: > > Hi Ganesh, > > Sorry for the late reply. > I have checked logs as well, it seems like CAS is not connecting with OKTA > at the time of logout. > > log details:

Re: [cas-user] Re: CAS OKTA integration

2018-08-13 Thread Ganesh and Sashi Prasad
When you click on a Logout link, it goes to https://cas.mydomain.com/cas/logout?service=http://www.myapp.mydomain.com The name of the application from where the logout was triggered is passed as the value of the parameter "service". If you had said cas.logout.redirectParameter=ratatouille

[cas-user] Re: CAS OKTA integration

2018-08-13 Thread sarika deshmukh
Hi Ganesh, I have added those properties in cas.properties.But no luck. what exactly that service stands for in this property below, cas.logout.redirectParameter =service Is there anything still missing? On Monday, 2 October 2017 12:49:48 UTC+5:30, Антон Шихмат wrote: > > Hello everyone, >

Re: [cas-user] Re: CAS OKTA integration

2018-08-13 Thread Ganesh and Sashi Prasad
Have you got these entries in your properties file? cas.logout.followServiceRedirects=true cas.logout.redirectParameter=service # cas.logout.confirmLogout=false # cas.logout.removeDescendantTickets=false The first two are particularly important. I'm assuming that your application has a logout

[cas-user] Re: CAS OKTA integration

2018-08-13 Thread sarika deshmukh
Hello everyone, I am working on OKTA Logout and facing some issues while implementing it. I have added signout parameters in OKTA account as below: Single Logout URL: https://localhost:8443/cas/logout SP issuer: urn:herb:saml:pac4j.org and also got Signature Certificate from OKTA and added it.