I just discovered this problem in 6.5.x as I was attempting to implement the same thing in our environment. Where you ever able to discover a workaround?
On Wednesday, August 25, 2021 at 10:16:07 AM UTC-7 ro...@mun.ca wrote: > Looking to see if anyone has experience with this use case. > > > > · CAS 6.3.x from cas-overlay-template > > · LDAP with LPPE enabled > > · custom account management application (service using CAS for > authentication) > > · When a users password has less then 30 days left to expiry, the > LPPE triggers the interrupt webflow that loads casLoginMessageView.html for > “Authentication Succeeded with Warnings” > > · We customized templates/casLoginMessageView.html to add a > button that links to our custom account management application > > · When a near expiry user logs in, they are presented with the > following UI > > > > · At this point the TGT is created in the ticket registry, but no > TGC in the client browser > > · If the user clicks “continue” the TGC is set, establishing the > session in the client browser > > · If the user clicks “change password”, since TGC is not set, the > session is never valid and so sends the user into a “loop” where they go > back to the cas/login because no TGC is set in the client browser > > > > With interrupt notifications there is a way to configure “ssoEnabled: > true”, which I think would resolve this issue. Does any such webflow > option exist for the “Authentication Succeded with Warnings”? > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7dc4a7d0-d5be-4e29-984b-287a853f1f42n%40apereo.org.
