Robert,
Are you intending to register _every_ SP in a federation feed, or add the
service entries only when you are asked by your user base?
You will still have to group SP by similar characteristics, such as attributes
released, policy, or MFA, etc.
If you want to have a single catch all entry, you may be able to shift the load
to a groovy script.
Ray
On Fri, 2022-06-24 at 16:51 +0000, King, Robert wrote:
Notice: This message was sent from outside the University of Victoria email
system. Please be cautious with links and sensitive information.
I am attempting to integrate a SAML federation into our CAS instance. I seem
to be stuck on service entry defeind access.
It seems that to allow SAML federation I have to configure a wildcard for
entityId/serviceId. I was assuming that saml service entries would require
both a positive metadata match and entityId match. Seems that by entering the
SAML service entry the wildcard match also applies to CAS services.
example SAML service entry
{
"@class" : "org.apereo.cas.support.saml.services.SamlRegisteredService",
"serviceId" : "^https://.*$";,
"name" : "Federation Test",
"id" : 10000003,
"evaluationOrder" : 10,
"metadataLocation" : "https://url/to/metadata.xml";
}
After entering the above service entry, any request to
“/cas/login?service=anything” will match. Makes sense if only serviceId is
used for the match. But I figured, incorrectly, that metadata was also
involved.
Am I missing something, or do I have to iteratively add every possible entity
id into the regex for serviceId. That seems unmaintainable at scale.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1ac8f8ea1a4ff4e1f2ba8c7cf98e66605a7b228c.camel%40uvic.ca.
