[
https://issues.apache.org/jira/browse/OFBIZ-6963?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15808596#comment-15808596 ]
james yong commented on OFBIZ-6963:
-----------------------------------
i managed to run CAS SSO server v4.2.1 (latest release) under OFBiz trunk (head version). One of the issues encountered was unable to render the JSPs from CAS SSO Server. The cause was traced to Juel which implements only the EL Spec 2.2. Will create a jira to replace juel dependency with an up-to-date implementation (EL Spec 3.0).
> Single sign-on to OFBiz with CAS
> --------------------------------
>
> Key: OFBIZ-6963
> URL:
https://issues.apache.org/jira/browse/OFBIZ-6963> Project: OFBiz
> Issue Type: Improvement
> Components: ALL APPLICATIONS
> Affects Versions: Trunk
> Reporter: james yong
>
> OFBiz is made up of several web applications.
> To allow the user to sign in only once, a unique token value is presented for verification each time the user navigates to an unvisited web application.
> This approach has the following limitations:
> 1) You cannot work with multiple windows, as there is only 1 valid token value at any time and other token values will be invalid in older-opened windows.
> 2) There is a need to refresh the whole page, so that all links will contain the valid token value.
> 3) Not easy to compose a page that get contents from different web applications in OFBiz
> Adding CAS SSO component as a core into OFBiz will remove the limitations mentioned above.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
Locked
