The sequence diagram here describes the setup pretty well: https://wiki.jasig.org/display/CASC/CAS+Java+Client+Gateway+Example
On Sun, Aug 21, 2016 at 1:38 PM, Mark <[email protected]> wrote: > Hi, > > thanks for the quick reply. > > you can use gateway mode on the homepage of B. This will check to see if > there is a CAS SSO session, and if so issue a ST for B and log the > user in. > > Hmm, I'll check this one out but how is the check for the CAS-login > initiated in gateway mode? This would still happen when trying to either > access a protected part of the page or through clicking a "Login"-Button > and not just by opening the main page of the site? > > Am Sonntag, 21. August 2016 13:26:30 UTC+2 schrieb wgthom: >> >> Yes, proxy tickets are designed to allow a service to call another >> service on behalf of a user, so that is not what you are looking for. >> >> In order to achieve the SSO behavior from Website A to Website B you >> can use gateway mode on the homepage of B. This will check to see if >> there is a CAS SSO session, and if so issue a ST for B and log the >> user in. Another approach would be to have the URL in A go to a CAS >> protected URL at B, which should also initiated login. >> >> https://wiki.jasig.org/display/CAS/gateway >> >> Best, >> Bill >> >> >> On Sun, Aug 21, 2016 at 3:14 AM, Mark <[email protected]> wrote: >> > I'm currently trying to figure out wether or not the following scenario >> can >> > be done with a CAS-Server setup: >> > >> > - Suppose I got 3 Websites / -apps (A,B,C) >> > - All three are setup (via plugins) so that their login systems us the >> > CAS-Server (already working fine) >> > >> > To me this seems like rather basic CAS-stuff. Now two more advanced >> > "problems": >> > >> > - After I logged in to Website A and I open Website B I'm not already >> > logged in but I do have to click "Login" again. I guess that's because >> CAS >> > issues the login and cookies based the indidvidual service that called >> it >> > and there's no way one can be auto-logged in to all sites connected to >> the >> > CAS-login once you logged in to the first site? >> > - Is ticket-proxying a way to achieve this? As far as I understood, >> > Proxying tickets would mean that (in my example) A on login also asks >> CAS >> > for a proxy ticket for B which A would present to B upon calling >> something >> > like a webservice at B. Which would rule out proxying for my scenario. >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups >> > "CAS Community" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an >> > email to [email protected]. >> > To post to this group, send email to [email protected]. >> > Visit this group at https://groups.google.com/a/ap >> ereo.org/group/cas-user/. >> > To view this discussion on the web visit >> > https://groups.google.com/a/apereo.org/d/msgid/cas-user/2924 >> 7a7e-9c38-47e1-b70d-c6ff246c1769%40apereo.org. >> > For more options, visit https://groups.google.com/a/apereo.org/d/optout. >> >> > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > . > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/f5dcb4c5-5498-4c03-8d38- > 1504266ebc92%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/f5dcb4c5-5498-4c03-8d38-1504266ebc92%40apereo.org?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/a/apereo.org/d/optout. > -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAPpkTuGvaUu%2BmFyhewK5xX%2Bf85YOD_f12L%2B0y08gCBG4zzoSKg%40mail.gmail.com. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
