'What is the point of the Kerberos Service Ticket (ST) in CAS?
In CAS you have Ticket Granting Tickets (TGT) and Service Tickets (ST). I don't see why you need STs if you already have a TGT. You can simply validate the TGT and return a green light for authorization to the client for the owner of the TGT.
So why do we need an additonal ticket next to the TGT called ST ?
Solution 1:[1]
I suspect this 2-fold ticket generation process is a means to:
- Refresh the authentication without repeatedly enter credentials (which are weak)
So TGT is much like refresh token in JWT.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | dz902 |