Hello, I'm having the same problem, it seems that the HTTP-POST binding is not supported at all.
This is because pac4j creates a redirect action <https://github.com/pac4j/pac4j/blob/400cec0c94a93ba80dc43208c9e5d179dfd70af4/pac4j-saml/src/main/java/org/pac4j/saml/redirect/SAML2RedirectActionBuilder.java> of type SUCCESS with no location but with content. The content contains the result of a Velocity template <https://github.com/apigee/java-opensaml2/blob/master/src/main/resources/templates/saml2-post-binding.vm> which has an HTML with a form that does the POST action and a script that executes the form automatically. But the cas-pac4j integration code (cas-server-support-pac4j-core-clients which is a dependency of cas-server-support-pac4j-webflow) <https://github.com/apereo/cas/blob/fb21bd0045590c821d5f588276409a74f062e4f4/support/cas-server-support-pac4j-core-clients/src/main/java/org/apereo/cas/support/pac4j/web/flow/DelegatedClientAuthenticationAction.java#L199> *only expects redirects, looking only to location that will be empty.* The created class `ProviderLoginPageConfiguration` will be used by the loginProviders HTML fragment <https://github.com/apereo/cas/blob/a55bd714817281c199bea6a6363a0d8122443450/webapp/resources/templates/fragments/loginProviders.html#L9> to generate the buttons and has no information on the content it needs to present to the user, nor the fragment logic to present this to the user. This seems to be a missing feature in CAS integration with pac4j, I can look into developing a solution and posting it as a pull request, but I am not sure what would be the best strategy here, as the button click needs to open a page with the form, or somehow strip the form from the content received and inject it in the page. sexta-feira, 25 de Agosto de 2017 às 10:32:59 UTC+1, Fabio Martelli escreveu: > > Hi all, although I solved my issues with missing css and js, SAML2 > delegated authentication issue persists. > It seems that my problem is related to the destination binding type. By > adding the following configuration for my provider, data for login page is > not provided with SSO location URL. > > Is SAML2 delegated authentication available just for providers supporting > Redirect binding? > Please, let me have a feedback. > BR, > F. > > > cas.authn.pac4j.saml[0].destinationBinding=urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST > > Il 25/08/2017 10:17, Fabio Martelli ha scritto: > > Il 25/08/2017 09:13, Fabio Martelli ha scritto: > > Hi All, it seems that delegated authentication that was working fine with > CAS 5.2.0-RC2 in not working anymore with 5.2.0-RC3-SNAPSHOT. > > In particular, the IdP URLs shown into the login page are not correct. > Furthermore, nor the look&feel seems to be correct because missing css. > > Am I missing something? > > Thank you in advance for your support. > > Best regards, > > F. > > Hi, it seems that the theme files are into > > *cas-server-webapp-tomcat/WEB-INF/classes/static/themes/apereo * > > instead of > > *src/main/resources/static/* > > > The issue that I have comes from the fact that the file > *cas-theme-default.properties* reports > > *standard.custom.css.file=/css/cas.css* > *cas.javascript.file=/js/cas.js* > > but the css and js directories are into *themes/apereo* not just into */*. > > > It exists another file reporting the right root suffixes: > *apereo.properties*. > > Unfortunately I cannot understand its meaning/purpose. > > > BR, > > F. > > -- > Fabio > Martellihttps://it.linkedin.com/pub/fabio-martelli/1/974/a44http://blog.tirasa.net/author/fabio/index.html > > Tirasa - Open Source > Excellencehttp://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm > > Apache Syncope PMChttp://people.apache.org/~fmartelli/ > > > -- > Fabio > Martellihttps://it.linkedin.com/pub/fabio-martelli/1/974/a44http://blog.tirasa.net/author/fabio/index.html > > Tirasa - Open Source > Excellencehttp://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm > > Apache Syncope PMChttp://people.apache.org/~fmartelli/ > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3d15c7e5-96fb-49ca-8d98-74e945a9abd9%40apereo.org.
