Duo Universal Prompt no longer storing TGT cookie CAS 6.5.8.

[David Malia]

Hello,

I'm attempting to upgrade CAS from 5.3.x to 6.5.x for the Duo Universal Prompt changes.  Currently on 6.5.8.   I've noticed since enabling the Universal Prompt, the TGT cookie is no longer being sent to the browser when Duo auth occurs.  If a user is not going through the Duo authentication flow, the TGT cookie is set as expected.  Is this something expected?

Thanks,

David Malia

[David Malia]

After more debugging, I can see the TGT cookie being set with a max age of 0 during the Universal Prompt flow, but non-Duo enabled logins have the max age of the cookie being set to the configured cas.tgc.max-age property's value.