CAS SSO Plugin

Version

Function Description

You can download the CAS Single Sign-on plugin to easily and quickly log in to the decision-making platform through CAS authentication without codes.

Note:

Requests are passed by default (requiring no CAS authentication) during remote design.

Plugin Installation

To download the plugin, click CAS Single Sign-on.

For details about installing plugins in the designer, see Designer Plugin Management.

For details about how to install plugins on the server, see Server Plugin Management.

Page Introduction

After the plugin is installed, log in to the decision-making platform as super admin, and choose System Management > System Setting. The Integrated CAS SSO tab page is added.

Note:

·       The configuration page is only available for the super admin.

·       Hot deployment is supported. That is to say, you can install or enable the plugin without restarting the project.

·       You can modify the configuration without restarting the project.

·       If you have installed the plugin, changed the authorization and perform re-registration, you need to restart the project to for the plugin to take effect.

Enabling CAS SSO

Enable CAS SSO.

CAS Configuration

Fill in the settings and click Save.

The following table describes these settings.

Settings	Description
CAS Center Address	Enter the CAS center address, and click Test Connection to check whether the connection is successful.
CAS Center Login Address	Enter the CAS center login address.
CAS SLO	If this function is enabled, you log out of the CAS authentication center during logout of the decision-making platform. Note: You cannot only set CAS SLO.
H5 Request	If this function is enabled, H5 requests require no CAS authentication. If this function is disabled, you can log in only through CAS authentication.
Platform Login Page	·         If this function is enabled, you can log in through the decision-making platform login page. If this function is disabled, you can log in only through CAS authentication, in which case you cannot manually log out of the decision-making platform if CAS SLO is disabled. ·         After this function is enabled: If you access http://IP address:Port number/Project name/decision, you are redirected to the CAS login page. If you access http://IP address:Port number/Project name/decision/login, you are redirected to the platform's default login page.

The following provides specific introduction:

1. CAS Center Address:

·       If the CAS environment is built by the enterprise, you can obtain the CAS server IP address (in the http://CAS server IP address/cas format) from the relevant personnel of the enterprise. 

·       If you configure the CAS server by referring to CAS Server Construction, the CAS center address is in the format of http://IP address:Port number/cas.

Note:

1. If HTTPS is enabled, the CAS center address should include the domain name used when you apply for the certificate (consistent with the certificate domain name), in the https://cas domain name/cas format.

2. The CAS center address needs to be added to the trusted sites in IE browser.

2. When only CAS SSO is set:

·       If Platform Login Page is not enabled, you will not log out after clicking Exit in the upper right corner and refresh the page in the browser.

·       If Platform Login Page is enabled, you will be forcibly redirected to the platform's default login page (actually not logging out of the platform) after clicking Exit in the upper right corner. If you directly accesshttp://IP address:Port number/Project name/decision, the previous login status is displayed.

Solution 1: Through the Platform

Log in to the platform as super admin, choose System Management > System Setting > Integrated CAS SSO, disable CAS SSO, and click Save.

Solution 2: Through the Link

After the project starts, access the link (http://IP address:Port number/Project name/decision/url/cas/reset?username=Super admin username&password=Super admin password) as super admins, and disable CAS configuration to restore default settings.