OpenID Connect server

[Michael]

Hi all,

I have started to learn CAS and I need your help.

I want to use CAS as OpenID Connect server.

https://apereo.github.io/cas/development/installation/OIDC-Authentication.html

Questions:

1)      Where I should put the file described in the link below:

https://apereo.github.io/cas/development/installation/OIDC-Authentication.html#register-clients

2)      Is it possible to configure clients via REST API?

3)      How is possible to unregister clients?
REST API?
Remove the file described above?

4)      What keystore / certificate is used by OpenID Connect server?
How to create new keystore / certificate?

Thank you in advance for your help.

Best regards,

   Michael

[Jérôme LELEU]

Hi,

1) like other CAS services in JSON: in the src/main/resources/services directory

2) 3) It's not possible via the REST API

4) Tools available to generate JWKS are at the end of the doc: https://apereo.github.io/cas/development/installation/OIDC-Authentication.html#keystores

Thanks.

Best regards,

Jérôme

--
CAS gitter chatroom: https://gitter.im/apereo/cas
CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
CAS documentation website: https://apereo.github.io/cas
CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To post to this group, send email to cas-...@apereo.org.
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d56d234f-486a-44c8-b11a-9054954e07ca%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

[Michael]

Hi Jérôme,
Thank you for the fast reply!

I will happy for the additional clarifications:

1)      I need to register and unregister clients dynamically at the runtime.
How can I do it?
I guess if I will put the JSON file in the following folder I need to use the same client: src/main/resources/services directory

2)      How can I configure claims that OIDC server will return to the client?
Can I add my custom claims?

Best regards,

   Michael

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

[Misagh Moayyed]

1)      I need to register and unregister clients dynamically at the runtime.

How can I do it?

https://openid.net/specs/openid-connect-registration-1_0.html 

2)      How can I configure claims that OIDC server will return to the client?

Can I add my custom claims?

https://apereo.github.io/cas/development/integration/Attribute-Release-Policies.html 

[Michael]

Thanks Misagh,
1)
The link below describes the dynamic registration.
Does CAS support the static registration?
I supposed the JSON example related to the static registration.

2) Is it possible to add to claims something else in addition to the user attributes?
I still not familiar with the CAS user model, but I want to send a user groups or roles.

Thank you for your help,

Michael

[Misagh Moayyed]

The link below describes the dynamic registration.
Does CAS support the static registration?
I supposed the JSON example related to the static registration.

Yes. That’s it. The dynamic part is the “REST API” you had in mind which isn’t implemented, but would be trivial to do so.

2) Is it possible to add to claims something else in addition to the user attributes?

I am inclined to say yes, but you do need to provide an example. Lets talk in concrete terms: what is that something else? where does it come from? What are its potential values? 

[Michael]

Thanks Misagh,
I still need a clarification.

Is the static registration supported at runtime?

I need to add and remove clients via static registration.

[Misagh Moayyed]

Yes, via the management webapp. 

---

From: "Michael" <furman....@gmail.com>
To: "CAS Community" <cas-...@apereo.org>
Cc: "Misagh Moayyed" <mmoa...@unicon.net>
Sent: Tuesday, October 18, 2016 5:53:07 PM
Subject: Re: [cas-user] OpenID Connect server

--
CAS gitter chatroom: https://gitter.im/apereo/cas
CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
CAS documentation website: https://apereo.github.io/cas
CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To post to this group, send email to cas-...@apereo.org.
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/0516aa2c-a4f6-46e2-94f4-5ad8b99e5358%40apereo.org.

[Michael]

Hi,
Is below link to the management webapp?
https://github.com/apereo/cas-services-management-overlay/tree/5.0

[Misagh Moayyed]

Yes.