Matteo,

There are some issues with this if you would like to participate in single
sign on.  An Authentication request is done to create a Single Sign On
session, not for each individual application that uses CAS.  You would need
to build authorization into CAS at the time a Service Ticket is granted.

-Scott

On 4/23/07, Matteo Matteo <[EMAIL PROTECTED]> wrote:

An idea:
We would like to use an application name in our credentials and according
to this name we should check if our user has an access to an application. If
yes - give him a granting ticket, if not - show an error page.
What should I configure/change to be able to check if our user has an
access when he's getting his granting ticket?
It should work like
We have 3 applications.
1. User loggs in into an application where he is granted.
2. He tries to go to the second or the third application but without
success (CAS system does not authorize him there automatically, because he
has no access to these applications)
Thanks
Matvey
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas




--
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to