I have a service with a login form. The login form also has a link to Azure AD for delegated login for certain users.
When the link is used, I see a message in my logs:
Registered service [FOOBAR] does not define any authorized/supported delegated authentication providers. It is STRONGLY recommended that you authorize and assign providers to the service definition. While just a warning for now, this behavior will be enforced by CAS in future versions.
I assume it wants an entry in the service file like:
"delegatedAuthenticationPolicy" : {
"@class" : "org.apereo.cas.services.DefaultRegisteredServiceDelegatedAuthenticationPolicy",
"allowedProviders" : [[ "FOOBAR" ] ],
"permitUndefined": true,
"exclusive": false
}
This should still allow LDAP authentication, correct?