public final class SendTicketGrantingTicketAction
extends org.springframework.webflow.action.AbstractAction
SendTicketGrantingTicketAction that mimics the default component in CAS
with one key difference: it will only destroy the previous TGT issued if there is no MFA
context available.
If a TGT is issued as part of primary authn first without without going through MFA,
that TGT will remain in the context. Subsequent requests that are MFA-aware will create
new MFA-aware TGTs with their associated authentications. But, we will not be able to kill
the previous TGT because that may have cached the credentials as part of the original primary authn
and invalidating it will cause issues for extensions such as clearPass.
The default behavior is that of CAS which assumes to caching of principal credential.
Deployments that require that type of caching will need to disable destroying the primary authn TGT
via setDestroyPreviousSSOSession(boolean).| Constructor and Description |
|---|
SendTicketGrantingTicketAction() |
| Modifier and Type | Method and Description |
|---|---|
protected org.springframework.webflow.execution.Event |
doExecute(org.springframework.webflow.execution.RequestContext context) |
void |
setAuthenticationSupport(net.unicon.cas.addons.authentication.AuthenticationSupport authenticationSupport) |
void |
setCentralAuthenticationService(org.jasig.cas.CentralAuthenticationService centralAuthenticationService) |
void |
setDestroyPreviousSSOSession(boolean destroyPreviousSSOSession) |
void |
setTicketGrantingTicketCookieGenerator(org.jasig.cas.web.support.CookieRetrievingCookieGenerator ticketGrantingTicketCookieGenerator) |
protected org.springframework.webflow.execution.Event doExecute(org.springframework.webflow.execution.RequestContext context)
doExecute in class org.springframework.webflow.action.AbstractActionpublic void setTicketGrantingTicketCookieGenerator(org.jasig.cas.web.support.CookieRetrievingCookieGenerator ticketGrantingTicketCookieGenerator)
public void setCentralAuthenticationService(org.jasig.cas.CentralAuthenticationService centralAuthenticationService)
public void setAuthenticationSupport(net.unicon.cas.addons.authentication.AuthenticationSupport authenticationSupport)
public void setDestroyPreviousSSOSession(boolean destroyPreviousSSOSession)
Copyright © 2013-2015 Unicon Inc.. All Rights Reserved.