This is the behavior that I am seeing in 5.2.7:
- if I have a single delegated idp, this works 
https://myapppretectedwithcas?client_name=remoteidp1 
<https://myapppretectedwithcas/?client_name=remoteidp1>. It works great; 
get redirected to remoteidp1 comes back to app, great. 

cas.authn.pac4j.cas[0].loginUrl=https://remoteidp1/cas/login
cas.authn.pac4j.cas[0].protocol=CAS20
cas.authn.pac4j.cas[0].clientName=remoteidp1
cas.authn.pac4j.cas[0].autoRedirect=true # not sure if this does anything

cas.authn.pac4j.autoRedirect=true # i guess this works

- but if I have two idps, then 
https://myapppretectedwithcas?client_name=remoteidp1 
<https://myapppretectedwithcas/?client_name=remoteidp1> does not work 
anymore

cas.authn.pac4j.cas[0].loginUrl=https://remoteidp1/cas/login
cas.authn.pac4j.cas[0].protocol=CAS20
cas.authn.pac4j.cas[0].clientName=remoteidp1
cas.authn.pac4j.cas[0].autoRedirect=true # not sure if this does anything

cas.authn.pac4j.autoRedirect=true # i guess this works

cas.authn.pac4j.cas[1].loginUrl=https://remoteidp2/cas/login
cas.authn.pac4j.cas[1].protocol=CAS20
cas.authn.pac4j.cas[1].clientName=remoteidp2

Now, nothing works,
this does not work meaning the user is just presented with the WAYF page, 
but they are not sent to the IDPs directly
https://myapppretectedwithcas?client_name=remoteidp2 
<https://myapppretectedwithcas/?client_name=remoteidp2>
this does not work
https://myapppretectedwithcas?client_name=remoteidp1 
<https://myapppretectedwithcas/?client_name=remoteidp1>

Thank you for your help!
Best.

On Wednesday, July 21, 2021 at 9:00:43 AM UTC-4 Alin Tomoiaga wrote:

> How can we skip the WAYF (choose IDP screen) when delegating to multiple 
> IDPs?
>
> Consider the scenario:
> - our cas delegates to two other cas servers
> - when the use logs in, they are presented with a screen allowing them to 
> choose the IDP
> - every time the user logs in, they need to choose the idp.
> - is there a way to cache/save the choice as a default and /or provide the 
> user with a url that will take them directly to the desired IDP?
>
> Thanks
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/0fa27ebf-0e4d-4888-b367-52cfeb45db22n%40apereo.org.

Reply via email to