I'd like to opinion of people of this list for what should be the best
solution for my problem.

All users in my current database have 2 keys to be unique identified:
 - the domain the user belongs to
 - the username

So, if a user called 'john' in the domain 'brazil' wants to log in, he
should provide both username, domain.

The problem is the login page in CAS has just the username field. The
question is what is the best way to provide the domain to CAS. Some
alternatives:
 1 - Create a hidden field on the login page, pass a ?domain=xxxxx parameter
in login url, and use a special Credential with the domain parameter
 2 - make the user login filling the username with something like
'user/domain'
 3 - Guess the domain based on a Virtual host subdomain. For example: at
brazil.mylogin.com the domain is brazil, at usa.mylogin.com the domain is
usa and so on.
 4 - Any other idea?

Another question: once the user is logged, how can I get the domain
information from the applications? because cas:serviceResponse responds just
cas:user. Is there any way to receive other parameters? Is this a good
practice?

Thanks for your help!

Daniel

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to