Get in Touch

Course Outline

Introduction

  • The case for SSO (Single-Sign-On Authentication).
  • CAS vs. LDAP vs. OpenID.

An overview of the CAS Architecture

  • System components.
  • CAS Server.
  • CAS clients.
  • Supported protocols.
  • Software components
    • Spring MVC/Spring Webflow.
    • Ticketing.
    • Authentication.

Building CAS as an Overlay Project

  • Building and deploying with Gradle, Maven, and Docker.
  • Using custom and third-party source code.
  • Managing dependencies.

Configuring Authentication in CAS

  • Orchestrating authentication handlers with the authentication manager.
  • Choosing authentication handlers and schemes.
  • Testing the default authentication scheme.
  • Principal Resolution.
  • Transforming the user ID.
  • Setting up "Remember Me" long-term authentication.
  • Setting up proxy authentication.
  • Multi-factor authentication (MFA).
  • Limiting failed login attempts with login throttling.
  • Configuring an SSO session cookie.

Attribute Resolution and Release

  • Principal-Id attribute: receiving the authenticated user ID.
  • Attribute release policy: Releasing attributes to applications.
  • Caching attributes: Caching resolved attributes.
  • Encrypting attributes: Conditionally encrypting attributes.

Troubleshooting

Summary and Next Steps

Requirements

  • An understanding of security concepts (authentication, authorization, etc.).
  • Familiarity with Linux and the command line.

Audience

  • System administrators.
 7 Hours

Number of participants


Price per participant

Upcoming Courses

Related Categories