Hi, when trying to login a production Liferay portal using CAS as a SAML 
IdP provider, the portal brings this error message:

"ERROR [http-nio-0.0.0.0-9444-exec-3][WebSsoProfileImpl:216] Request was 
required to be secured but was not
org.opensaml.messaging.handler.MessageHandlerException: Request was 
required to be secured but was not"

This happens when CAS sends the petition to the "/acs" endpoint in the 
Liferay portal.

The Liferay configuration has a property called "SSL required" which 
description is "Requires SAML messages to be exchanged over SSL". Since 
it's a production environment it must be enabled.

In developing environment where is not enabled, the login flow works with 
no issues.

Is there something that must be configured in the CAS server to send the 
SAML requests as secured?

Thanks in advance.


-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/08714278-b91a-46a9-82d5-366efe9a5a4an%40apereo.org.

Reply via email to