Yan, There are two parts involved; user authentication, and service registry. The TGT says user is authenticated. The ST says this service is allowed to use CAS for user authentication. Every service that wants to use CAS must be registered in the CAS services database.
Ray On Tue, 2016-03-08 at 06:41 -0800, Yan Zhou wrote: Hi there, This is a beginner question, but I cannot seem to find answer anywhere. Why is there a need for service ticket, it has to be validated every time a service is requested through CAS? If user has a valid TGT, why would CAS server ever deny him trying to access a service? Thanks, Yan -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
