> Do you have a logout URL configured? Best I know is that when a session > expires in Bb, it kills the Bb session, then sends the browser to the IdP > logout URL, which would kill your TGT.
We use a custom logout URL that is in essence just a JSP that redirects to the homepage. We have CAS configured subordinate to ADFS, and as such, there really is not a way to "log out" of CAS, even if you do, any new attempt will automatically be re-authenticated by the upstream ADFS and new TGT granted. I can't reproduce it, but I suspect the code on Blackboard's side associates their application persistence (JSESSIONID or whatever) taking into account the present id of the ST and upon change drops the session .. first I've ever seen of that, but I am trying to troubleshoot blind. -Mike. ________________________________ From: [email protected] <[email protected]> on behalf of Richard Frovarp <[email protected]> Sent: Tuesday, January 30, 2018 10:42:04 AM To: [email protected] Subject: Re: [cas-user] Blackboard Ultra Do you have a logout URL configured? Best I know is that when a session expires in Bb, it kills the Bb session, then sends the browser to the IdP logout URL, which would kill your TGT. On 01/30/2018 07:08 AM, Michael O Holstein wrote: We recently moved onto Blackboard's SaaS offering (aka "Ultra") and random users are telling us it times out of them. While I suspect this is an issue of opening the app, letting it sit for 2 hours, and then noticing their session went away (which should re-auth as the TGT is still valid on our end). Anyone else seen this? How'd you fix it? Our TGT/ST lifetimes are as-delivered default. Thanks, Michael Holstein CISSP Mgr. Network & Data Security Cleveland State University -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CO2PR0801MB6478C3DA610FAD823AD852283E40%40CO2PR0801MB647.namprd08.prod.outlook.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CO2PR0801MB6478C3DA610FAD823AD852283E40%40CO2PR0801MB647.namprd08.prod.outlook.com?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/a194b20f-76cc-5909-b36c-1c74b4fa352d%40ndsu.edu<https://groups.google.com/a/apereo.org/d/msgid/cas-user/a194b20f-76cc-5909-b36c-1c74b4fa352d%40ndsu.edu?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CO2PR0801MB647F75A09D73B01CBF27A3F83E40%40CO2PR0801MB647.namprd08.prod.outlook.com.
