<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Follow up:<br>
<br>
I was able to work around this issue, specifically with PeopleSoft,
by:<br>
<br>
1. Writing a script that builds a form with hidden fields and
auto-submits it; effectively a POST "redirect" if you will.<br>
2. Adjusting the service name on the PS side to match the script.<br>
<br>
So it works like this now:<br>
<br>
User logins into portal (authenticating via CAS)<br>
User clicks link to PeopleSoft, which sends them to the new script<br>
New script generates a form that does a POST with appropriately
valued hidden form fields, and auto-submits<br>
PeopleSoft calls /serviceValidate with a service matching the script<br>
User is now logged into PeopleSoft<br>
<br>
This is definitely not ideal, but will work until Marvin and team
have time to work on adding the POST method to CAS.<br>
<br>
It may not be a wide-spread issue, but in our implementation of
PeopleSoft, if the request doesn't come in as a POST, the service
validate code doesn't run.<br>
<br>
Thanks again,<br>
-Brian<br>
<br>
<div class="moz-cite-prefix">On 02/23/2016 10:20 AM, Brian Biggs
wrote:<br>
</div>
<blockquote cite="mid:56CCA2EB.8030806@sonoma.edu" type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
Hi,<br>
<br>
Opened ticket as requested: <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="https://issues.shibboleth.net/jira/browse/IDP-928">https://issues.shibboleth.net/jira/browse/IDP-928</a><br>
<br>
Thanks,<br>
-Brian<br>
<br>
<div class="moz-cite-prefix">On 02/23/2016 09:53 AM, Marvin
Addison wrote:<br>
</div>
<blockquote
cite="mid:CACOs9MRitGqiSj-=2OsQy5nJ-07P3cZz36Nz=+t6=56iP-z1fg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_quote">
<div dir="ltr">On Tue, Feb 23, 2016 at 12:37 PM Brian Biggs
<<a moz-do-not-send="true"
href="mailto:brian.biggs@sonoma.edu">brian.biggs@sonoma.edu</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> Not that's it's
terribly relevant, but the "method=POST" argument was
supported as far back as CAS v3.4.10</div>
</blockquote>
<div><br>
</div>
<div>It's relevant in that it's something that apparently
folks need, and the evolution from a server-specific
feature to something that's in the next protocol revision
indicates it's sufficiently important to merit
standardization. In any case I'm open to implementing
support for that parameter.</div>
<div><br>
</div>
<div>Please file a Jira enhancement issue and I'll look into
targeting 3.3.0. I don't think the protocol document is
terribly clear about how it should work, but I can review
Jasig CAS server implementation to ensure the IdP does the
same thing.</div>
<div><br>
</div>
<div>M</div>
<div><br>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Brian Biggs
Sonoma State University
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Brian Biggs
Sonoma State University
</pre>
</body>
</html>