CAS 5.3.7 - Problem for OIDC delegated authentication

[Matthieu Borez]

Hello,

 

I am currently working with the latest version of branch 5.3.X of CAS and FranceConnect (OIDC). I would like to delegate FranceConnect authentication to CAS. When I apply this configuration, no problem the application starts well.

 

However, when I click on the delegation button, the FranceConnect service sends me an answer:

{"status": "fail", "message": "The following fields are not supposed to be present : delegatedclientid"}

 

The redirection URL is composed of redirect_uri and delegatedClientId.

1. Is delegatedClientId mandatory in the authentication process and/or how to ignore it?

2. redirect_uri only takes /cas/login?client_name=FranceConnect instead of sending https://cas-server.com/cas/login?client_name=FranceConnect

 

Thank you in advance,

Matthieu

[Matthieu Borez]

cas.authn.pac4j.oidc[0].id=<oidc_id>

cas.authn.pac4j.oidc[0].secret=<oidc_secret>

cas.authn.pac4j.oidc[0].discoveryUri=http://127.0.0.1:8080/json/fc.json

cas.authn.pac4j.oidc[0].useNonce=true

cas.authn.pac4j.oidc[0].preferredJwsAlgorithm=HS256

cas.authn.pac4j.oidc[0].clientName=FranceConnect

cas.authn.pac4j.oidc[0].usePathBasedCallbackUrl=false

cas.authn.pac4j.oidc[0].autoRedirect=false

cas.authn.pac4j.typedIdUsed=true

[Boris P1]

Hi Matthieu Borez,

Since January, did you find the way to do it because i have the same issue?

Boris.

[Matthieu Borez]

I have not heard any news from him since January and I have been forced, due to lack of time, to abandon my work on the subject.

Matthieu

[Boris P1]

Thanks.

[Boris P1]

A solution here:

https://groups.google.com/a/apereo.org/d/msg/cas-user/6N_CuA0j8mA/xMJjGtXiAgAJ