[opencms-dev] Single Signon and Opencms 6

[Arash Kaffamanesh]

Jeremy wrote:

>Thanks, Arash.  Basically, from my understanding, CAS is a reqirement?

>Can you explain how a user's credentials are propogated to OpenCMS?

see http://www.yale.edu/tp/auth/usingcasatyale.html:

...

CAS is not a session-management mechanism; it provides no facility for
helping you keep track of users once they're authenticated.

...

CAS is a single sign-on facility; once a user authenticates to CAS, the
user need not continue to supply a password for other applications 

<!-- my comment: e.g. for opencms users which have been authenticated
through ldap and their sessions could be syncronized btw. Portal
Applications, if they are not managed to run in the same context -->

> CAS is a reqirement?

No.

See also other sso solutions:

Java Open Single Sign-On Project
http://www.josso.org/

Or

http://www.pubcookie.org/

Or investigate to write your own custom authentication service :-)

Which portal framework do you prefer / have to work with?

Best regards,
arash


-----Original Message-----
From: opencms-dev-bounces at opencms.org
[mailto:opencms-dev-bounces at opencms.org] On Behalf Of Jeremy Torres
Sent: Mittwoch, 1. Dezember 2004 21:46
To: The OpenCms mailing list
Subject: Re: [opencms-dev] Single Signon and Opencms 6


Arash Kaffamanesh wrote:

>Jeremy,
>
>If your portal is able to talk ldap and you have opencms6 and a 
>SingleSignOn aware Framework, then you are on the sunsite :-) That can 
>be done with uPortal http://www.ja-sig.org/ or Cocoon or others ...
>
>Visit this thread:
>
>http://www.pomegranate.de:90/cms/forum/viewthread?thread=1
>
>Best Regards,
>Arash
>
>
>-----Original Message-----
>From: opencms-dev-bounces at opencms.org 
>[mailto:opencms-dev-bounces at opencms.org] On Behalf Of Jeremy Torres
>Sent: Mittwoch, 1. Dezember 2004 20:06
>To: opencms-dev at opencms.org
>Subject: [opencms-dev] Single Signon and Opencms 6
>
>
>Hello.
>
>I would like to be able to "pass" a user's credentials from a portal to
>OpenCMS 6.  Is there any ideas on how this could be done?  For example,

>I would like a user logged into a portal the ability to use an "IFrame"

>portlet to access content in OpenCMS, however, I don't want the user to

>log in twice (once in the portal and again in OpenCMS).  Suggestions on

>an approache specific to OpenCMS would be greatly appreciated.
>
>Regards,
>Jeremy
>
>
>
>_______________________________________________
>This mail is send to you from the opencms-dev mailing list
>To change your list options, or to unsubscribe from the list, please 
>visit http://mail.opencms.org/mailman/listinfo/opencms-dev
>
>
>
>_______________________________________________
>This mail is send to you from the opencms-dev mailing list
>To change your list options, or to unsubscribe from the list, please 
>visit http://mail.opencms.org/mailman/listinfo/opencms-dev
>
>
>  
>
Thanks, Arash.  Basically, from my understanding, CAS is a reqirement?  
Can you explain how a user's credentials are propogated to OpenCMS?



_______________________________________________
This mail is send to you from the opencms-dev mailing list
To change your list options, or to unsubscribe from the list, please
visit http://mail.opencms.org/mailman/listinfo/opencms-dev