SSO .NET CAS Client keeps redirecting to homepage post successful authentication
We needed to integrate our app with Salesforce to implement single sign on for our client. We have used .NET CAS Client using the configuration settings mentioned in here .
We are able to integrate and authenticate users with single sign on. However, the site keeps sending the authenticated users to login page in our application and then redirecting to the home page.
This is happening sporadically and there are no specific indicators as why the request from various pages are getting checked for authentication and results in redirecting.
The cofiguration we have is -
<httpModules xdt:Transform="Insert">
<add name="DotNetCasClient" type="DotNetCasClient.CasAuthenticationModule,DotNetCasClient" />
</httpModules>
….
….
<system.webServer>
<modules xdt:Transform="Insert">
<remove name="DotNetCasClient" />
<add name="DotNetCasClient" type="DotNetCasClient.CasAuthenticationModule,DotNetCasClient" />
</modules>
</system.webServer>
….
….
<configSections>
<section name="casClientConfig" type="DotNetCasClient.Configuration.CasClientConfiguration, DotNetCasClient" />
</configSections>
….
….
<casClientConfig casServerLoginUrl="https://<sso.salesforceserver.url>/cas/login"
casServerUrlPrefix="https://<sso.salesforceserver.url>/cas/"
serverName="http://<app.server.url>/start/"
notAuthorizedUrl="~/not-authorized"
cookiesRequiredUrl=""
redirectAfterValidation="true"
gateway="false"
renew="false"
singleSignOut="true"
ticketTimeTolerance="5000"
ticketValidatorName="Cas20"
serviceTicketManager="CacheServiceTicketManager"
gatewayStatusCookieName="CasGatewayStatus" />
….
Once the user logs in and starts using the application. The User is redirected to the login page where the SSO iframe is rendered. As the user is already authenticated, the SSO request redirects to configured successful authenticated URL ( serverName="http://<app.server.url>/start/ )
Please help tracking the redirection issue and preventing it from happening.
Thanks,
链接地址: http://www.djcxy.com/p/47980.html上一篇: OAuth中的“脱机”访问意味着什么？