User management : ask user for missing email

[Vincent Weber]

Hello,

Context : I use CAS 6.5 with LDAP.

I have a question for which I will need your advice on the best practice to follow.

When creating our users in LDAP, they don't have an email address.
Their connection is made with an employee number and a password provided, which they must change on the first connection.
This all works, however we would like to require users to fill in their email if it is not.

Is it possible to do this natively with CAS, or should interrupts be used to redirect to another application?

Thank you in advance for your help !

[CAS Community]

If you need to, you will have to build this functionality yourself.

[Pablo Vidaurri]

You can do this by injecting a step in the the default cas login webflow.

Change the webflow to do an emailCheck action before the generation the TGT. This will simply check if the email exist. If it does then return success and proceed to the TGT step. Otherwise return some other string like "addEmailAction" which will prompt for the email and insert it into your target system. Then have that "addEmailAction" return success to continue to the TGT step.

-psv