AuthenticationInterrupt : disabling SSO without showing the Interrut page

[Sébastien BEAUDLOT]

Hi,

I am on CAS 5.3.4 with Authentication Interrupt enabled with a Groovy script.

What i want to achieve is kind of a "quarantine" system that allow or disallow authentication to services based on an attribute value.

My problem is that, on some cases, i want the groovy script to just go on with authentication but with SSO enabled, so only this service is allowed (because the user is still under quarantine). Service should not always be allowed without SSO, only the script have the "power" to decide what to do.

I couldn't achieve to logon without SSO and without displaying the Interrupt page (no block, no interrupt, just automatically keep on authentication silently).

What's working is : return new InterruptResponse(message: message, interrupt: true, block: false, ssoEnabled: false)

This is Ok but it does display Authentication page, and i don't want to. Is there another way to achieve this ?

Regards.

--
Sébastien Beaudlot

Avignon Université

univ-avignon.fr

[Mickaël]

Hi Sébastien,

I have seen your talk at JRES 2019, did you publish your groovy script on a repo ?

Thanks, Mickaël (from France)