<div dir="ltr">Thanks Scott<div><br></div><div>you mean something like below, but same failure result ....with authentication issue  </div><div><br></div><div><div>  <bean parent="RelyingPartyByName"  c:relyingPartyIds="urn:federation:MicrosoftOnline"></div><div>            <property name="profileConfigurations"></div><div>                <list></div><div>         <bean parent="SAML2.SSO" p:encryptAssertions="false" p:signAssertions="true" p:signResponses="false" p:encryptNameIDs="false" /></div><div>         <bean parent="SAML2.ECP" p:encryptAssertions="false" p:signAssertions="true" p:signResponses="false" p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" <b>p:authenticationFlows="#{{'RemoteUserInternal</b>'}}" /></div><div>                </list></div><div>            </property></div><div>        </bean></div></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jul 18, 2017 at 12:08 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 7/17/17, 9:49 PM, "users on behalf of Lalith Jayaweera" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:ljayaweera@gmail.com">ljayaweera@gmail.com</a>> wrote:<br>
<br>
> Do we have to do any other configuration to ECP to enforce remote_user<br>
<br>
</span>You'd probably have to specify something in the ECP profile bean to get it to pick that login flow instead of whatever you're doing with CAS, such as p:authenticationFlows="#{{'<wbr>RemoteUserInternal'}}"<br>
<br>
I would still dump Apache from this and just configure the Password flow instead, you have much more control that way and a simpler setup.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</div></div></blockquote></div><br></div>