Hello Everyone, 
I have been working toward integrate CAS with Google Cloud. 
My CAS version is 5.3.11. CAS document listed 2 ways 
<https://github.com/apereo/cas/blob/5.3.x/docs/cas-server-documentation/integration/Google-Apps-Integration.md>to
 
register Google App. I would like to use the SAML2 IdP functionality in CAS.
I have managed to configure Google Admin and generated sp metadata and 
register SP. However, CAS tells me that the application is not authorized 
to use cas.
the log file shows,  

ERROR 
[org.apereo.cas.support.saml.web.idp.profile.AbstractSamlProfileHandlerController]
 
- <CAS has found a match for service [
https://accounts.google.com/samlrp/metadata?rpid= 
<https://accounts.google.com/samlrp/metadata?rpid=034dvdgy2ukvojk>*xxx*] in 
registry but the match is not defined as a SAML service>


The source code shows it is because the check (registeredService instanceof 
SamlRegisteredService) failed.



Here is the register json file
{"@class":"org.apereo.cas.support.saml.services.SamlRegisteredService
","serviceId":"https://accounts.google.com/samlrp/metadata?rpid\ 
<https://accounts.google.com/samlrp/metadata?rpid%5Cu003d034dvdgy2ukvojk>
*xxx*
","name":"SAMLService","id":4526,"evaluationOrder":30,"metadataLocation":"/home/work/cas/saml/sp/4526.xml","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy","excludeDefaultAttributes":true,"allowedAttributes":["java.util.ArrayList",["username","email"]]}}


My question is how to register Google as SAML2 SP?

Thank you.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/88486554-65d5-422e-95d6-66a29a8efdcdn%40apereo.org.

Reply via email to