Thanks Andy Passing service works as expected. However I would like it to work without service (should redirect to default).
Tried with 6.0.x and no luck. Further debugging, revelead that when client_name is supplied, org.aoereo,cas,web.DelegatedClientWebflowManager.rettrieve() tries to extract service from non existent ticket in the session and it fails. However if the user is signed in already, org.aoereo,cas,web.DelegatedClientWebflowManager.store() method creates a ticket for the service and it works. In summary, https://login.example.com/cas/login?client_name=SAML2Client works fine if the user is *already signed* into the service But if there is *no prior session*, hitting https://login.example.com/cas/login?client_name=SAML2Client throws UnauthorizedServiceException. Thanks Krishna On Wednesday, June 5, 2019 at 11:33:47 PM UTC-7, Andy Ng wrote: > > Hi krishna, > > Try using https://login.example.com/cas/login?service=xxx instead of just > pure https://login.example.com/cas/login to see if that fix it. > > From my previous experience, CAS with delegated authentication seems to > not work the best when you don't give them a specific service param. > > Or, you can try downgrade it to 6.0.x to see if that works... Maybe is a > problem with 6.1.x > > FYI I use 5.3.x and it doesn't have the problem you specified. > > Cheers! > - Andy > > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/96bd8548-ca64-4c9e-92ae-e1e169087a8f%40apereo.org.
