CAS Authentication by PKE usb token

[Meysam Shirazi]

Hello every one

I'm looking for a way to develop a solution bade on Apereo CAS to authenticate user by PKI enabled usb token like this one(https://cpl.thalesgroup.com/access-management/authenticators/pki-usb-authentication/etoken-5110-usb-token).

I will appreciate any help to do that.

[Ray Bon]

Meysam,

Start with reviewing Authentication|Methods and Multifactor Authentication in  cas docs, https://apereo.github.io/cas/6.3.x/index.html.

There are a lot of options, one of which is custom where you write groovy scripts (instead of modifying or adding to cas code).

Ray

On Sat, 2021-01-23 at 01:22 -0800, Meysam Shirazi wrote:

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

Hello every one

I'm looking for a way to develop a solution bade on Apereo CAS to authenticate user by PKI enabled usb token like this one(https://cpl.thalesgroup.com/access-management/authenticators/pki-usb-authentication/etoken-5110-usb-token).

I will appreciate any help to do that.

-- 

Ray Bon

Programmer Analyst

Development Services, University Systems

2507218831 | CLE 019 | rb...@uvic.ca

I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.

[Meysam Shirazi]

Thanks Ray for your reply.

OK, It's a good idea. I found Custom Authentication Strategies here :https://apereo.github.io/cas/6.3.x/installation/Configuring-Custom-Authentication.html so it says I can do it in 3 steps:

1. Design the authentication handler.
2. Register the authentication handler with the CAS authentication engine.
3. Let CAS to recognize the authentication configuration.

that's all about authentication handler but what's about custom login page (may contains a random from backend for sign)? is that any way to customize other authentication components just like authentication handler?

Meysam

[Ray Bon]

Meysam,

There is custom webflow, https://apereo.github.io/cas/6.3.x/webflow/Webflow-Customization.html, for changing or adding steps/pages to the log in steps.

Ray

[Meysam Shirazi]

OK, it seems that using custom webflow is not a good idea for some one how is not "one must possess a reasonable level of understanding of the webflow’s internals and injection policies." 

So is it a clear way to develop a new CAS module(Authentication Method or MFA) with Webflow Auto Configuration?

[Ray Bon]

Meysam,

Here are some resources on custom MFA:

https://fawnoos.com/2016/10/19/mfacas5-extcfg/

https://fawnoos.com/2018/06/19/cas53webflow-extensions/

and mix those with the cas documentation.

I am looking into a custom MFA flow now. I will let you know my progress.

Ray

[Meysam Shirazi]

Thanks,

As you know all of MFA providers are implemented in separate packages in support category, so they can be added(activate) as a dependencies to the main project as a separate modules.  Is it possible to build a custom MFA provider as a new module just like other providers? 

[Ray Bon]

That is exactly what I am planning to do. Here is hoping management gives me the time.

Ray

[Maysam Shirazi]

OK Ray, Good luck.

Meysam

[Maysam Shirazi]

Is that the way (https://apereo.github.io/2019/03/12/cas61x-codebase-feature-build) can we do to develop a new module for CAS?

[Ray Bon]

That is the process.

It gets updated for each release. More recent blogs are available at https://fawnoos.com/blog/.

Ray