CAS SSO Plugin

Version

Function Description

You can download the CAS SSO plugin (CAS single sign-on) to effortlessly achieve CAS authentication for the FineBI system without coding.

Plugin Download

You can contact our technical support to obtain the plugin.

For details about installing plugins, see Plugin Management.

Page Introduction

After the plugin is installed, restart the project, log in to the FineBI system as the super admin, and choose System Management > System Setting. The Integrated CAS SSO tab page is added.

Note:

1. The configuration page is available only for the super admin.

2. After you install the plugin, you need to restart the project to enable the plugin.

3. You can modify the configuration without restarting the project.

4. Once the CAS SSO plugin is installed, users need to replace the authorization and re-register. A restart of the project is necessary for the plugin to take effect.

Enabling CAS SSO

Enable CAS SSO.

CAS Configuration

Fill out the setting items and click Save.

The following table describes the setting items.

Setting Item	Description
CAS Center Address	Enter the CAS center address, and click Test Connection to check whether  the connection is successful.
CAS Center Login Address	Enter the CAS center login address.
CAS SLO	If this function is enabled, the FineBI system logout will trigger CAS center  logout. Note: You cannot configure CAS SLO only.
H5 Request	If this function is enabled, H5 requests require no CAS authentication.  If this function is disabled, you can log in only through CAS authentication.
Platform Login Page	If this function is enabled, you can log in through the FineBI system login page. If this function is disabled, you can log in only through CAS authentication, in  which case you cannot manually log out of the FineBI system if CAS SLO is  disabled. After this function is enabled, if you access http://IP address:Port number/Project name, you are redirected to the CAS login page; if you access  http://IP address:Port number/Project name/decision/login, you are  redirected to the system's default login page.

The following content shows the additional descriptions.

1. CAS Center Address:

If your CAS environment is set up for an enterprise, you can obtain the IP address of the CAS server from the relevant personnel within the enterprise. The format of the CAS center address is: http://CAS server IP address/cas.

Note:

1.If HTTPS is enabled, the CAS center address should include the domain name used when you apply for the certificate (consistent with the certificate domain name), in the format of https://CAS domain name/cas.

2.The CAS center address needs to be added to the trusted sites in an IE browser.

2. Configuring CAS SSO only, not CAS SLO

If Platform Login Page is not enabled, you will not log out after clicking Exit in the upper right corner and refreshing the page in the browser.

If Platform Login Page is enabled, you will be redirected to the system's default login page (actually not logging out of the system) after clicking Exit in the upper right corner. If you directly access http://IP address:Port number/Project name/decision, the previous login status is still displayed.

Solution One: Through the System

Log in to the FineBI system as the super admin, choose System Management > System Setting > Integrated CAS SSO, disable CAS SSO, and click Save.

Solution Two: Through the Link

After the project starts, access the link (http://IP address:Port number/Project name/decision/url/cas/reset?username=Super admin username&password=Super admin password) as the super admin, and disable the CAS configuration to restore to the default settings.