Configure CAS Protocol Application SSO

In addition to supporting the configuration of the CAS protocol as an authentication source for logging in to various application systems through CAS protocol authentication, the IDaaS platform also supports integrating applications through the CAS protocol to achieve application single sign-on (SSO) with IDaaS as the authentication platform. After logging in to the IDaaS User Center, users can directly jump to and log in to the application without a second login.

Prerequisites

Administrator permissions for the IDaaS Enterprise Center.

Procedure

Configure CAS Protocol Application

1. Log in to the IDaaS Enterprise Center, choose Resources > Apps from the top navigation bar, click Add Self-Built App, set the app name, save, and enter the app detail page.

2. On the app information page, enable Authentication Integration, set it to CAS, and save.

   

3. Click Configure next to Authentication Integration to enter the authentication integration detail page, and set the application Service address.

   

4. Switch to the Authorization Management > App Accounts page, and add access accounts for the app.

   

5. Choose Settings > Service Configuration from the top navigation bar, and click CAS Configuration to obtain the corresponding parameters.

   TIP

   Supports setting the matching mode for the application Service address, i.e., the application address matching mode for CAS-type apps under Resources > Apps. After updating the application address matching mode, all CAS apps need to have their application addresses changed again.

   • Exact Match: The CAS service matches the application address of CAS-type apps based on the full path of the requested service parameter. Exact match is the default mode.
   • Domain Match: The CAS service matches the application address of CAS-type apps based on the domain name of the requested service parameter. It is recommended to use domain match mode when the CAS application address is unclear.

   

6. Configure the obtained CAS interface-related information into your application.

Development Integration

After configuration in the IDaaS platform is complete, please refer to the CAS Protocol to complete the subsequent integration configuration. After configuration, users can single sign-on to the app from the User Center.