Managing user account in CAS

[cheekian yap]

Hi all,

I'm thinking to store all employee's account in CAS. I have MySQL as my database authentication currently. Is there any best practice to manage user account in CAS? What I can think of now is dump sql file into my user_info table. But this looks not scalable to add or delete user.

I also have CAS management webapp ready, but it seemed to be designed to manage service registered on CAS, not user account? Please correct me if I'm wrong.

[Ray Bon]

Typically, one manages the user base in an ERP or identity management software. Cas just looks to one or more sources for authentication.

Cas management is just for the services.

We use our identity management software to transfer users and attributes from our ERP database to LDAP, This runs every few minutes. Cas authenticates from LDAP.

If you want to create a custom flow, so users could update their own records take a look at password management, https://apereo.github.io/cas/6.2.x/password_management/Password-Management.html and custom flows, https://apereo.github.io/cas/6.2.x/webflow/Webflow-Customization.html

Ray

On Tue, 2020-12-01 at 23:26 -0800, cheekian yap wrote:

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

Hi all,

I'm thinking to store all employee's account in CAS. I have MySQL as my database authentication currently. Is there any best practice to manage user account in CAS? What I can think of now is dump sql file into my user_info table. But this looks not scalable to add or delete user.

I also have CAS management webapp ready, but it seemed to be designed to manage service registered on CAS, not user account? Please correct me if I'm wrong.

-- 

Ray Bon

Programmer Analyst

Development Services, University Systems

2507218831 | CLE 019 | rb...@uvic.ca

I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.