CAS 6.4: IDP initiated login - oAuth2

[Chris Durham]

Hi,

I know that IDP initiated (ie unsolicited) login is available for SAML, but is there anyway to achieve the same thing with oAuth?  We have a pair of portals that we interact with (and use their IDP as a delegated authority) that work via oAuth.

They want their "portal apps" to redirect to use using oAuth - basically by using the same redirect url that would be used during the delegated login process (ie it hits

www.mycasurl.com/cas/login?clientname=yyyy&code=zzzzzzzzz etc

Currently CAS is throwing a Unauthorized Service error and I'm presuming the lack of ticket is the issue.  Has anyone come across a similar request before?

Thanks

Chris