Thanks for quick reply Bryan! This information will certainly be helpful.

Couple of more questions:
1. How do we handle following services in SSO environment?

- Register user
- password retries(account lock/unlock)
- change password
- delete user

I am just trying to get my head around how each application participating in 
SSO deals with above use cases for ex: user registration . Do they have their 
own registration pages which directly talk to ldap for creating/deleting users 
OR CAS server should provide all these user management services? 

2. What are the best practices around modifying the CAS code? Should we take 
snapshot of CAS code and import entire code into our own svn repository and 
customise it or is their any other way of doing it?


Mohit Manrai




Sent from iPhone

On 1 Mar 2011, at 03:03 PM, Bryan Wooten <[email protected]> wrote:

> I had a similar requirement a couple of years ago. We were required to have 
> CAS accept OpenSSO (now OpenAM) credentials.
> 
> I solved the problem by cloning the cas-server-support-x509 module and 
> creating one that validated OpenSSO tokens. I then modified the webflow to 
> call my OpenSSO authentication handler. It worked out well, but we abandoned 
> OpenSSO the project never went to production.
> 
> Perhaps you could do something similar to handle Twitter and Facebook 
> credentials.
> 
> HTH,
> 
> Bryan 
> 
> -----Original Message-----
> From: Mohit Manrai [mailto:[email protected]] 
> Sent: Monday, February 28, 2011 11:23 PM
> To: [email protected]
> Subject: [cas-user] Facebook authentication
> 
> Hi,
> 
> Does CAS support Facebook/twitter authentication? Or does it provides any 
> hooks for authenticating user against social networking websites along with 
> Local LDAP authentication? I am designing SSO solution for my company and one 
> of the requirement that business has come up with is that they want the 
> ability to login via Facebook/twitter along with standard CAS login. 
> 
> Any ideas how we can achieve this? 
> 
> Mohit
> -- 
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
> 
> 
> -- 
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
> 

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to