Palle Girgensohn wrote:
Hi!

We use CAS for a project, and now we need SSO with a legacy application running in Lotus Domino. Is there a simple way to let Domino be CAS-ified?

Palle,

It can probably be made to work. Domino supports web single sign-on through LTPA. This document describes the details:

<http://www-12.lotus.com/ldd/doc/tools/c/7.0/api70ug.nsf/85255d56004d2bfd85255b1800631684/ceda2cb8df47607f85256c3d005f816d>
or <http://tinyurl.com/2sclb9>

You can make a redirector that authenticates the user with CAS, then hands them an LTPA cookie and sends them to the Notes application.

One drawback is that if the session expires, Notes displays its own login form. You may be able to customize the login form to redirect back to CAS, but I haven't looked into that.

Attached is a short example in PHP, including a class to handle generation and validation of LTPA tokens. I believe it to be working code, but your mileage may vary.

-John

Attachment: ltpa.class.php
Description: application/php

Attachment: ltpa.example.php
Description: application/php

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to