delegation to Azure AD via pac4j with ssoEnabled=false in service

53 views

Skip to first unread message

Pablo Vidaurri

unread,

Sep 26, 2024, 3:55:16 PM9/26/24

to CAS Community

I have CAS setup to either delegate users to Azure for login using pac4j or authenticate against LDAP .... Works well.

Now I have a service that requires the user to always be prompted for credentials using sseEnabled=false in service file. This works as expected for LDAP but when delegation to Azure AD, AD returns the token without prompting for credentails. I understand I can pass in prompt=login to azure to force prompting but how can I trigger this behavior via the ssoEnabled service flag?