Cas 5.x Target Application Selection

23 views
Skip to first unread message

Gokhan Mansuroglu

unread,
Dec 7, 2016, 4:15:38 AM12/7/16
to CAS Community
Hi,

I have the following scenario :

1. In the login page, user enters her username.
2. The list of granted applications are filled from a service in the login page.
3. User select the application (s)he wants to login.
4. Enters her password and redirected to that application.

Does Cas cover such a scenario ? If not, how it should be configured in order not to make deployment and future upgrades more complicated ?

Thank you.

Ray Bon

unread,
Dec 7, 2016, 11:54:06 AM12/7/16
to cas-...@apereo.org
Check out login web flow https://apereo.github.io/cas/5.0.x/installation/Webflow-Customization.html
You might want to put the list of applications after a successful login. That way some ne're-do-well cannot try user names to get a list of applications you support (and I think it will make customization simpler).

Ray
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d67702c2-0c4d-4540-868e-2c1f0845ec26%40apereo.org.

-- 
Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE C023 | rb...@uvic.ca

Andrew Morgan

unread,
Dec 7, 2016, 11:59:42 AM12/7/16
to CAS Community
Create a separate web page that requires CAS authentication to view (some
would call it a portal page). When the user visits that page, they will
be redirected to CAS for authentication. When they return, your page can
lookup the list of services they should see using the provided username
(query a database, perhaps). Each of those other services should also be
protected by CAS authentication.

Andy

Uxío Prego

unread,
Dec 7, 2016, 4:00:46 PM12/7/16
to cas-...@apereo.org
We do that too, since quite a time (so not 5 though) and are mostly happy C: with the results so far.

Regards,
Reply all
Reply to author
Forward
0 new messages