CAS: credentials don't get validated if the login page is idle

Question

I have a situation in which, if the login page stays idle for sometime then the entered credentials don't get validated and nothing happens. Instead same login page is displayed clearing the entered username and password. But next try will work and the credentials get validated. Does anyone know about this issue?

Answer 1

There is a timeout associated with the CAS login page. When a login page is served to the client, a login ticket associated with it is created which lasts the CAS web session. So you have to enter credentials before the login ticket expires, which depens on the CAS web session timeout (defined in your web.xml).