The exception is because casFilter.failureUrl is not set. After it is set, the sign out callback from CAS server results in 302 redirect to the failure URL.
Shiro follows the standard flow and asks CAS server to authenticate itself. But https://wiki.jasig.org/display/CASC/Configuring+Single+Sign+Out says SingleSignOutFilter must come before the other filters, so that the sign out callback can skip the flow. Can I conclude that Shiro doesn't support CAS single sign out? -- View this message in context: http://shiro-user.582556.n2.nabble.com/CAS-single-sign-out-exception-tp7577991p7578002.html Sent from the Shiro User mailing list archive at Nabble.com.
