Gabi Teris escribió:
> I need to integrate the CAS server inside my web application, since it's 
> already a big one and so I don't need to reimplement the database access. So 
> I need to send some parameters to another web application that require some 
> user data (no password) like: user full name, role, etc. Can I do that by 
> sending a request with parameters(like the ticket parameter), and if so, 
> where can I change the code ?

Gabi,

As Marvin said, you can configure CAS to retrieve additional attributes
from your datastore and present them through SAML. I don't use SAML or
the client libraries at all and rather go with mod_auth_cas, which uses
CAS and this protocol doesn't seem to be able to provide additional attr

Be aware, though, that CAS is an authentication solution and doesn't aim
to provide enough information to also cover authorization, which is a
matter of your application or application cluster. I'd rather use REST
web services which know your business logic and provide you with a
simple list or OK/ERR messages for access control.

HTH,

-- 
José Miguel Parrella Romero (bureado.com.ve)          PGP: 0×88D4B7DF
Debian Developer                                Caracas, VE/Quito, EC

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to