Get in Touch

Course Outline

Introduction

  • The rationale for SSO (Single-Sign-On Authentication)
  • CAS versus LDAP versus OpenID

CAS Architecture Overview

  • System components
  • CAS Server
  • CAS clients
  • Supported protocols
  • Software components
    • Spring MVC/Spring Webflow
    • Ticketing systems
    • Authentication mechanisms

Developing CAS as an Overlay Project

  • Building and deploying using Gradle, Maven, and Docker
  • Utilizing custom and third-party source code
  • Managing dependencies

Configuring Authentication in CAS

  • Coordinating authentication handlers via the authentication manager
  • Selecting appropriate authentication handlers and schemes
  • Evaluating the default authentication scheme
  • Principal Resolution
  • Transforming user IDs
  • Configuring "Remember Me" for persistent authentication
  • Establishing proxy authentication
  • Implementing Multi-factor Authentication (MFA)
  • Preventing brute-force attacks through login throttling
  • Configuring SSO session cookies

Attribute Resolution and Release

  • Principal-Id attribute: Receiving the authenticated user ID
  • Attribute release policy: Distributing attributes to applications
  • Caching attributes: Storing resolved attributes for performance
  • Encrypting attributes: Conditionally securing attribute data

Troubleshooting

Summary and Next Steps

Requirements

  • A foundational understanding of security principles, including authentication and authorization.
  • Familiarity with Linux operating systems and command-line interfaces.

Audience

  • System administrators
 7 Hours

Upcoming Courses

Related Categories