Configuration for shib-cas-authn3, FORCE_AUTHN

[Michael A Grady]

> On Sep 27, 2017, at 4:50 PM, Mahmudul Hasan <cs.mahmud at gmail.com> wrote:
> 
> Hi, 
> 
> Anyone here is using shib-cas-authn3
> (https://github.com/Unicon/shib-cas-authn3 <https://github.com/Unicon/shib-cas-authn3>) to integrate with JASIG CAS as
> external authentication mechanism? Is there any way to configure it so that it
> automatically forces authentication via CAS every time? I want my
> users to login again if their CAS session/tickets expire. 

If you only want the CAS Server keeping sessions, controlling how long sessions last, then you simply turn off the session layer of the Shib IdP by uncommenting and setting to the false the following property in conf/idp.properties:

# Set to false to disable the IdP session layer
#idp.session.enabled = true
idp.session.enabled = false

Of course, you'll need to restart the IdP for that change to be in effect.

--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170927/24959c99/attachment.html>