[cas-user] Re: SAML functions very slow

2024-03-13 Thread Ocean Liu
Thank you for sharing your insights! Though it’s been nearly 4 years since your original post, we wanted to provide an update on our progress. We’re currently in the process of migrating from CAS 5.3 to CAS 7. During testing, we noticed an issue where CAS 7 took over 6 seconds to generate th

[cas-user] Re: LDAP autentication with DUO MFA only returning DUO attributes

2024-03-29 Thread Ocean Liu
Hi Mike, Our set up is very similar with yours: CAS 7, LDAP for authentication and attribute repository, DUO MFA enabled. We migrated from CAS 5.3, we noticed CAS 7 with DUO does add duo related attribute to the principle. However we can still see the attributes from the LDAP authentication and

[cas-user] CAS 7 error when getting SAML service metadata

2024-03-29 Thread Ocean Liu
Hi all, We encountered an issue where users were encountering the "Application Not Authorized to Use CAS" error when attempting to log in. Upon investigation, we found that CAS was encountering difficulties retrieving metadata. Here are the relevant log entries: 2024-03-29 09:46:31,272 ERROR

Re: [cas-user] cas.properties reference

2022-02-18 Thread Ocean Liu
Hey Ray, > I keep a copy of the cas project locally. I use it to search for properties, log messages and classes. I used to do the same thing until I found github.dev , https://docs.github.com/en/codespaces/the-githubdev-web-based-editor It is a web-based VSCode editor, it can also sync your V

Re: [cas-user] cas.properties reference

2022-02-18 Thread Ocean Liu
Haha, glad you find it useful! On Fri, Feb 18, 2022 at 11:50 AM Ray Bon wrote: > Oh my, Ocean Liu, you are my new best friend! > > Thanks > > Ray > > On Fri, 2022-02-18 at 10:02 -0800, Ocean Liu wrote: > > Notice: This message was sent from outside the University

Re: [cas-user] CAS SAML with Atlassian Cloud

2024-11-05 Thread Ocean Liu
Hi Neon, The ACS url doesn’t look right in your metadata file. Since you mentioned Atlassian will redirect you to your CAS, please check the SAMLRequest xml using a saml dev tool. It should be something like this: https://auth.atlassian.com/login/callback?connection=saml---"; Des

Re: [cas-user] CAS SAML with Atlassian Cloud

2024-11-15 Thread Ocean Liu
cy": { > "@class": "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" > }, > "accessStrategy": { > "@class": "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy", > "requireAllAttributes": false > }, &

[cas-user] Re: Embedded Script Groovy in Attribute definition

2025-02-18 Thread Ocean Liu
Hi Matthew, looks like you don't have an attribute named `firstname`. What's the attribute name in your source for the first name? On Tuesday, February 18, 2025 at 10:00:07 AM UTC-8 Matthew Gordon wrote: > I am using this example for the JSON Attribute Definitions " Embedded > Script" > https:/

Re: [cas-user] CAS 7.0.x to 7.2.x SAML 1.1 Issue

2025-06-02 Thread Ocean Liu
Hi Phil, I think Richard was on the right track. When we upgraded to CAS 7.2.x, we had the same problem. We solved it by updating the `cas.tgc.crypto.encryption.key` to a 512 bit key. If you are not sure, you can delete `cas.tgc.crypto.encryption.key` attribute from your configuration, and the

Re: [cas-user] CAS 7.0.x to 7.2.x SAML 1.1 Issue

2025-06-02 Thread Ocean Liu
n Banner application that uses the > SAML 1.1 protocol for SSO. I think that team is looking at upgrading to > Azure SSO at some point, so I just need to keep this working for a little > longer. > > Thanks, > > Phil > > On Monday, June 2, 2025 at 10:33:16 AM UTC-5 Ocean Liu

[cas-user] Re: Removing ST/TGT's on demand

2025-07-10 Thread Ocean Liu
Hi Brian, Have you tried testing these actuator endpoints? https://apereo.github.io/cas/7.1.x/authentication/Configuring-SSO.html#actuator-endpoints > DELETE /cas/actuator/ssoSessions/users/{username} Best, On Wednesday, July 9, 2025 at 6:04:06 AM UTC-7 Brian T. Huntley wrote: > Good day, all! >