CAS in IdP v3

[Kevin Foote]

> On Feb 2, 2016, at 9:34 AM, Brian Biggs <brian.biggs at sonoma.edu> wrote:
> 
> I'm fairly new to both Shibboleth and CAS, and I am trying to deploy IdP v3.2.1 with CAS enabled.
> The issue I'm having is that every interaction with a CAS client requires authentication.
> 
> I have read through the CAS documentation and I have upped the expire time on the CAS service ticket to 5 minutes, but still have the re-authentication issue.
> Expected behavior is that I should be able to interact with the CAS client for at least 5 minutes (30 minutes would be better) before having to re-authenticate.
> 
> Any tips or ideas about what to change? Has anyone else encountered this?


Most likely you need to use a suitable server-side storage option for the IdP session.
The default client side is not suitable for the CAS client validate routines. 

This is covered in the CAS option doc [1] 

[1] https://wiki.shibboleth.net/confluence/display/IDP30/CasProtocolConfiguration

--------
thanks
 kevin.foote