Adding acceptable use acceptance in workflow

[Benito J. Gonzalez]

All,

We are upgrading from CAS 2 to CAS 3.  I need a little direction with
adding a view between CAS user login and sending the ticket back.

The feature we want to implement verifies the user has accepted our
Acceptable User Policy.  After a successful login in CAS2, we check an
LDAP attribute to see if the user has accepted the policy.  If so, the
process moves along as normal.  If not, we put up the policy in a form
with "Accept"/"Decline" buttons.  On Accept, the LDAP attribute is
updated and the login process continues.

On to CAS 3:  In login-webflow.xml, guess my additions should come
between the action-state "submit" and action-state
"sendTicketGrantingTicket".  That seem right?  I was thinking an
action-state "verifyAupAcceptance" and a view-state "viewAupForm".
Would I create another action-state to handle the step after the user
accepts the AUP or use "verifyAupAcceptance"?

Also, just to test my understanding of webflow, I tried to simply insert
the form in the process.  Seem to be missing some parameters.  What do I
need?

Any help would be greatly appreciated,

--
Benito J. Gonzalez
Enterprise Web Applications Supervisor
Information Technology Department
University of California, Merced
Desk: 209.228.2974
Cell: 209.201.5052
Email: [hidden email]


--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Scott Battaglia-2]

It can't go before sending the TGT because the TGT is only stored in the request.  You'd have to do it after the TGT but before redirecting to the service.

Cheers,
Scott


On Mon, Jul 6, 2009 at 3:01 PM, Benito J. Gonzalez <[hidden email]> wrote:

All,

We are upgrading from CAS 2 to CAS 3.  I need a little direction with
adding a view between CAS user login and sending the ticket back.

The feature we want to implement verifies the user has accepted our
Acceptable User Policy.  After a successful login in CAS2, we check an
LDAP attribute to see if the user has accepted the policy.  If so, the
process moves along as normal.  If not, we put up the policy in a form
with "Accept"/"Decline" buttons.  On Accept, the LDAP attribute is
updated and the login process continues.

On to CAS 3:  In login-webflow.xml, guess my additions should come
between the action-state "submit" and action-state
"sendTicketGrantingTicket".  That seem right?  I was thinking an
action-state "verifyAupAcceptance" and a view-state "viewAupForm".
Would I create another action-state to handle the step after the user
accepts the AUP or use "verifyAupAcceptance"?

Also, just to test my understanding of webflow, I tried to simply insert
the form in the process.  Seem to be missing some parameters.  What do I
need?

Any help would be greatly appreciated,

--
Benito J. Gonzalez
Enterprise Web Applications Supervisor
Information Technology Department
University of California, Merced
Desk: 209.228.2974
Cell: 209.201.5052
Email: [hidden email]


--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Andrew Tillinghast]

Some javascript/style in this post has been disabled (why?)

Is there any documentation in the wiki or somewhere else that would give an overview of creating an acceptable use view? Currently we have acceptable use in our portal but as we casify more applications there is more traffic that isn't going through the portal so now there is a request to bubble that interface up to the login level.

-Andrew Tillinghast

On Jul 7, 2009, at 10:40 PM, Scott Battaglia wrote:

It can't go before sending the TGT because the TGT is only stored in the request.  You'd have to do it after the TGT but before redirecting to the service.

Cheers,
Scott


On Mon, Jul 6, 2009 at 3:01 PM, Benito J. Gonzalez <[hidden email]> wrote:

All,

We are upgrading from CAS 2 to CAS 3.  I need a little direction with
adding a view between CAS user login and sending the ticket back.

The feature we want to implement verifies the user has accepted our
Acceptable User Policy.  After a successful login in CAS2, we check an
LDAP attribute to see if the user has accepted the policy.  If so, the
process moves along as normal.  If not, we put up the policy in a form
with "Accept"/"Decline" buttons.  On Accept, the LDAP attribute is
updated and the login process continues.

On to CAS 3:  In login-webflow.xml, guess my additions should come
between the action-state "submit" and action-state
"sendTicketGrantingTicket".  That seem right?  I was thinking an
action-state "verifyAupAcceptance" and a view-state "viewAupForm".
Would I create another action-state to handle the step after the user
accepts the AUP or use "verifyAupAcceptance"?

Also, just to test my understanding of webflow, I tried to simply insert
the form in the process.  Seem to be missing some parameters.  What do I
need?

Any help would be greatly appreciated,

--
Benito J. Gonzalez
Enterprise Web Applications Supervisor
Information Technology Department
University of California, Merced
Desk: 209.228.2974
Cell: 209.201.5052
Email: [hidden email]


--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Scott Battaglia-2]

I don't know if there is any specific documentation.  You need to be sure to do it after the TGT is sent to the browser but before you would redirect (but remember, service tickets are only valid for a few minutes).

On Wed, Oct 21, 2009 at 2:19 PM, Andrew Tillinghast <[hidden email]> wrote:

Is there any documentation in the wiki or somewhere else that would give an overview of creating an acceptable use view? Currently we have acceptable use in our portal but as we casify more applications there is more traffic that isn't going through the portal so now there is a request to bubble that interface up to the login level.

-Andrew Tillinghast

On Jul 7, 2009, at 10:40 PM, Scott Battaglia wrote:

It can't go before sending the TGT because the TGT is only stored in the request.  You'd have to do it after the TGT but before redirecting to the service.

Cheers,
Scott


On Mon, Jul 6, 2009 at 3:01 PM, Benito J. Gonzalez <[hidden email]> wrote:

All,

We are upgrading from CAS 2 to CAS 3.  I need a little direction with
adding a view between CAS user login and sending the ticket back.

The feature we want to implement verifies the user has accepted our
Acceptable User Policy.  After a successful login in CAS2, we check an
LDAP attribute to see if the user has accepted the policy.  If so, the
process moves along as normal.  If not, we put up the policy in a form
with "Accept"/"Decline" buttons.  On Accept, the LDAP attribute is
updated and the login process continues.

On to CAS 3:  In login-webflow.xml, guess my additions should come
between the action-state "submit" and action-state
"sendTicketGrantingTicket".  That seem right?  I was thinking an
action-state "verifyAupAcceptance" and a view-state "viewAupForm".
Would I create another action-state to handle the step after the user
accepts the AUP or use "verifyAupAcceptance"?

Also, just to test my understanding of webflow, I tried to simply insert
the form in the process.  Seem to be missing some parameters.  What do I
need?

Any help would be greatly appreciated,

--
Benito J. Gonzalez
Enterprise Web Applications Supervisor
Information Technology Department
University of California, Merced
Desk: 209.228.2974
Cell: 209.201.5052
Email: [hidden email]


--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]



To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 

You are currently subscribed to [hidden email] as: [hidden email]


To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user