Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note
titleBe Careful

The OpenIdSingleSignOnAction has an additional parameter not configured here. Its the "extractor" property which accepts a "org.jasig.cas.support.openid.web.support.OpenIdUserNameExtractor". The default one merely accepts the value after the last "/". A more robust implementation should check the entire URL. Note, that means the default one SHOULD NOT be used in production.

login-

...

webflow.xml

Add the following action to your login-webflow.xml

Code Block
xml
xml

    <action-state id="openIdSingleSignOnAction">
    	<action bean="openIdSingleSignOnAction" />
    	<transition on="success" to="sendTicketGrantingTicket" />
    	<transition on="error" to="ticketGrantingTicketExistsCheck" />
    	<transition on="warn" to="warn" />
    </action-state>

You'll want to modify your InitialFlowAction's "success" event to go to "openIdSingleSignOnAction"