I just discovered this problem in 6.5.x as I was attempting to implement the same thing in our environment. Where you ever able to discover a workaround?
On Wednesday, August 25, 2021 at 10:16:07 AM UTC-7 [email protected] wrote: > Looking to see if anyone has experience with this use case. > > > > · CAS 6.3.x from cas-overlay-template > > · LDAP with LPPE enabled > > · custom account management application (service using CAS for > authentication) > > · When a users password has less then 30 days left to expiry, the > LPPE triggers the interrupt webflow that loads casLoginMessageView.html for > “Authentication Succeeded with Warnings” > > · We customized templates/casLoginMessageView.html to add a > button that links to our custom account management application > > · When a near expiry user logs in, they are presented with the > following UI > > > > · At this point the TGT is created in the ticket registry, but no > TGC in the client browser > > · If the user clicks “continue” the TGC is set, establishing the > session in the client browser > > · If the user clicks “change password”, since TGC is not set, the > session is never valid and so sends the user into a “loop” where they go > back to the cas/login because no TGC is set in the client browser > > > > With interrupt notifications there is a way to configure “ssoEnabled: > true”, which I think would resolve this issue. Does any such webflow > option exist for the “Authentication Succeded with Warnings”? > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7dc4a7d0-d5be-4e29-984b-287a853f1f42n%40apereo.org.
