[jira] [Commented] (OFBIZ-6963) Single sign-on to OFBiz with CAS

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Commented] (OFBIZ-6963) Single sign-on to OFBiz with CAS

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-6963?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15235075#comment-15235075 ]

james yong commented on OFBIZ-6963:
-----------------------------------

I can help to provide a patch if there are committers who are interested.

> Single sign-on to OFBiz with CAS
> --------------------------------
>
>                 Key: OFBIZ-6963
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-6963
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: ALL APPLICATIONS
>    Affects Versions: Trunk
>            Reporter: james yong
>
> OFBiz is made up of several web applications.
> To allow the user to sign in only once, a unique token value is presented for verification each time the user navigates to an unvisited web application.
> This approach has the following limitations:
> 1) You cannot work with multiple windows, as there is only 1 valid token value at any time and other token values will be invalid in older-opened windows.
> 2) There is a need to refresh the whole page, so that all links will contain the valid token value.
> 3) Not easy to compose a page that get contents from different web applications in OFBiz
> Adding CAS SSO component as a core into OFBiz will remove the limitations mentioned above.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
Reply | Threaded
Open this post in threaded view
|

Re: [jira] [Commented] (OFBIZ-6963) Single sign-on to OFBiz with CAS

Heidi Dehaes - Olagos
CAS is very famous. I use it every day. It is very secure if you programm
it in depth.

Eric

Olagos bvba
Heidi Dehaes
Kerkstraat 34
2570 Duffel
Belgium
Tel. :     015/31 53 04
GSM :    0485/22 35 80
E-mail : [hidden email]
http://www.olagos.eu
http://www.olagos.com
http://www.olagos.be
http://www.olagos.nl



2016-04-11 15:23 GMT+02:00 james yong (JIRA) <[hidden email]>:

>
>     [
> https://issues.apache.org/jira/browse/OFBIZ-6963?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15235075#comment-15235075
> ]
>
> james yong commented on OFBIZ-6963:
> -----------------------------------
>
> I can help to provide a patch if there are committers who are interested.
>
> > Single sign-on to OFBiz with CAS
> > --------------------------------
> >
> >                 Key: OFBIZ-6963
> >                 URL: https://issues.apache.org/jira/browse/OFBIZ-6963
> >             Project: OFBiz
> >          Issue Type: Improvement
> >          Components: ALL APPLICATIONS
> >    Affects Versions: Trunk
> >            Reporter: james yong
> >
> > OFBiz is made up of several web applications.
> > To allow the user to sign in only once, a unique token value is
> presented for verification each time the user navigates to an unvisited web
> application.
> > This approach has the following limitations:
> > 1) You cannot work with multiple windows, as there is only 1 valid token
> value at any time and other token values will be invalid in older-opened
> windows.
> > 2) There is a need to refresh the whole page, so that all links will
> contain the valid token value.
> > 3) Not easy to compose a page that get contents from different web
> applications in OFBiz
> > Adding CAS SSO component as a core into OFBiz will remove the
> limitations mentioned above.
>
>
>
> --
> This message was sent by Atlassian JIRA
> (v6.3.4#6332)
>