Hello,
I patched our Projeqtor instance to integrate with our CASv2 SSO system. This is a fast patch (<1 hour to developp).
To do this, I:
As login is read from HTTP header, others SSO (and web servers) can be used: Shibboleth SAML2, openid, and even PLAIN HTTP..
Here is my proof-of-concept code (lookup at bottom to view diffs), working for ~ 1 year in our instance:
git.univ-toulouse.fr/uftmip-pub/projeqto....0.7...6.0.7-patched
Todo:
handle case when logged user is not present in database (actually raw http response)
rename global parameter (CAS => SSO), because solution is generic and not CAS-specific
improve cookie management in finishSession (if necessary).
Regards,
Louis Chanouha
University of Toulouse (FR)
I patched our Projeqtor instance to integrate with our CASv2 SSO system. This is a fast patch (<1 hour to developp).
To do this, I:
- configured Apache module mod_auth_cas
- patched user retrieving process to read login from HTTP headers
- patched login proces to redirect to SSO's signout page
As login is read from HTTP header, others SSO (and web servers) can be used: Shibboleth SAML2, openid, and even PLAIN HTTP..
Here is my proof-of-concept code (lookup at bottom to view diffs), working for ~ 1 year in our instance:
git.univ-toulouse.fr/uftmip-pub/projeqto....0.7...6.0.7-patched
Todo:
handle case when logged user is not present in database (actually raw http response)
rename global parameter (CAS => SSO), because solution is generic and not CAS-specific
improve cookie management in finishSession (if necessary).
Regards,
Louis Chanouha
University of Toulouse (FR)