Hi Maciej. I'll definitely check this out and look for docs on the
plugin. It sounds very promising since it is a working solution for Z2
:-) On top of it, there ought to be good hints in Z2's PAS for doing
something in Z3. Hopefully it can be worked in to some functionality for
users/groups for z3. Many thanks.
Maciej Wisniowski wrote:
For single sign on there is also CAS (Central Authentication Service).
We're sucessfully using this in our Zope2 apps. It has plugin for PAS
in Zope2 (CAS4PAS). CAS also works with other systems - plugins for
java, php and other exists.
Important thing here is to distinguish between authentication and
authorization. For example SSO like CAS can only tell you if your
user is authenticated. It won't tell you if he has some permissions
and/or roles to do something. But with PAS you can write another plugin
that will set proper roles for user etc.
Zope3-users mailing list