defaultTicketRegistry cleaner and Single Logout (SLO)

47 views
Skip to first unread message

satnam

unread,
Oct 4, 2017, 7:02:16 PM10/4/17
to CAS Community
Hello,

we are using 4.2.7 and noticed that when CAS send SLO request to applications when user does not use TGT within 2 hours.  Is there a way to disable sending SLO when ticket registry cleaner removed the TGT?  we want to applications to receive SLO requests when user click on signout on any of application but not when user stay on one site for more than 2 hours. 

thank for your help


satnam

unread,
Oct 4, 2017, 7:11:55 PM10/4/17
to CAS Community
in prior version 4.0.x we were .. slo.tgtExpiredCallbacks.enabled to false.. can can we achieve this behavior with 4.2.7?

Ticket Registry Cleaner Behavior

Furthermore, the default behavior is to issue single sign out callbacks in response to a logout request or when a TGT is expired via expiration policy when a TicketRegistryCleaner runs. If you are using ticket registry cleaner and you want to enable the single sign out callback only when CAS receives a logout request, you can configure your TicketRegistryCleaner as such:


<bean id="ticketRegistryCleaner" class="org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner"
      p:ticketRegistry-ref="ticketRegistry"
      p:lock-ref="cleanerLock"
      p:logUserOutOfServices="${slo.callbacks.disabled:false}" />
Reply all
Reply to author
Forward
0 new messages