John Gasper

Update springSecurity.adoc

2

Jasig no longer exists... it's assets (CAS) are now apart of Apereo (see https://www.apereo.org/projects/cas)... also updated plugin links to what I believe are the correct references (existing are 404s).

Please check out https://hub.docker.com/r/unicon/shibboleth-idp/ and https://github.com/Unicon/shibboleth-idp-dockerized. This is where the work on my shibboleth-idp image will continue.

The centos image likely need to have permission checked and users setup for running Shibd appropriately.

Filter with extensible Match Rule fails validation when the rule changes the expected value type

2

Some directory varieties support additional match rules: https://docs.oracle.com/cd/E19476-01/821-0509/relative-time-matching-rules.html, when using these match rules the expected right-hand side value is not longer a Generalized Time format, but an alternative date format...

Remove Duo source from CAS-MFA code

1

Duo code does not belong in CAS-MFAS. It puts an unrealistic burden upon the project to publish updates when Duo changes the internal workings of their code as they recently...

Need a readme file

1

How embarrassing... I forgot to include a read me.

Document CAS Logout options (and support) in the readme

1

This is definitely a need. RE: - https://github.com/Unicon/shib-cas-authn3/issues/19 - https://github.com/Unicon/shib-cas-authn3/issues/20 - https://github.com/Unicon/shib-cas-authn3/issues/21

[2:56 PM] Misagh Moayyed: Should we disable the default "page" if /idp is left out? [2:56 PM] Misagh Moayyed: The default context redirect thingy in jetty I mean. Should it...

Code Review Item: Update Policy Needed

3

The Unicon IAM team did a code review and suggested several small adjustments. This is one of those adjustments: To facilitate adoption of this image, Unicon should state a "policy"...