Logout in CAS 7.1.1

[dhavan mehta]

I am looking for workaround to logout user in CAS 7.1.1 without using TGT. I have my application which creates session by validating ST provided by mobile app and don't receive TGT. Upon logout I want my application to call CAS and destroy session.

Is there any way to achieve this?

[Ray Bon]

dhavan,

You can delete a user session with an endpoint, https://apereo.github.io/cas/7.1.x/authentication/Configuring-SSO.html#actuator-endpoints

Ray

On Mon, 2024-12-02 at 13:55 -0800, dhavan mehta wrote:

You don't often get email from dmeht...@gmail.com. Learn why this is important

[dhavan mehta]

Thanks Ray Bon,

       Do I need to setup any access strategy for it? I am keep getting 403 when trying to call /cas/actuator/ssoSessions/users/{username} to destroy session. 

[Ray Bon]

dhavan,

See https://fawnoos.com/2023/10/25/cas70x-actuator-endpoints/

Ray

On Tue, 2024-12-03 at 06:42 -0800, dhavan mehta wrote:

You don't often get email from dmeht...@gmail.com. Learn why this is important

Thanks Ray Bon,

       Do I need to setup any access strategy for it? I am keep getting 403 when trying to call /cas/actuator/ssoSessions/users/{username} to destroy session. 

On Monday, December 2, 2024 at 10:16:18 PM UTC-5 Ray Bon wrote:

dhavan,

You can delete a user session with an endpoint, https://apereo.github.io/cas/7.1.x/authentication/Configuring-SSO.html#actuator-endpoints

Ray

On Mon, 2024-12-02 at 13:55 -0800, dhavan mehta wrote:

You don't often get email from dmeht...@gmail.com.Learn why this is important