Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Warning
titleNew CAS documentation site

CAS documentation has moved over to apereo.github.io/cas, starting with CAS version 4.x. The wiki will no longer be maintained. For the most recent version of the documentation, please refer to the aforementioned link.

Excerpt

CAS supports a pluggable and extensible policy framework to control the expiration policy of ticket-granting tickets (TGT) and service tickets (ST).

Both TGT and ST expiration policy beans are defined in the /cas-server-webapp/src/main/webapp/WEB-INF/spring-configuration/ticketExpirationPolicies.xml file in the CAS distribution.

...

Usage Example

Code Block
xml
xml

<!-- TGT expires after 2 hours in inactivity -->
<bean id="grantingTicketExpirationPolicy"
  class="org.jasig.cas.ticket.support.TimeoutExpirationPolicy">
  <constructor-arg
    index="0"
    value="7200000" />
</bean>

...

Usage Example

Code Block
xml
xml

<!-- TGT expires 4 hours after creation -->
<bean id="grantingTicketExpirationPolicy"
  class="org.jasig.cas.ticket.support.HardTimeoutExpirationPolicy">
  <constructor-arg
    index="0"
    value="14400000" />
</bean>

...

Usage Example

Code Block
xml
xml

<!--
TGT expires under one of two conditions:
 * More than 3 hours of inactivity
 * Used consecutively where less than 5 seconds has elapsed from the first use
-->
<bean id="grantingTicketExpirationPolicy"
  class="org.jasig.cas.ticket.support.ThrottledUseAndTimeoutExpirationPolicy"
  p:timeToKillInMilliSeconds="10800000"
  p:timeInBetweenUsesInMilliSeconds="5000"
/>

...

Usage Example

Code Block
xml
xml

<!-- TGT never expires -->
<bean id="grantingTicketExpirationPolicy"
  class="org.jasig.cas.ticket.support.NeverExpiresExpirationPolicy" />

...

Usage Example

Code Block
xml
xml

<!-- ST may be used exactly once and must be validated within 5 minutes. -->
<bean id="serviceTicketExpirationPolicy"
  class="org.jasig.cas.ticket.support.MultiTimeUseOrTimeoutExpirationPolicy">
  <constructor-arg
    index="0"
    value="1" />
  <constructor-arg
    index="1"
    value="300000" />
</bean>