Get in Touch

Course Outline

Introduction

  • The case for SSO (Single-Sign-On Authentication)
  • CAS versus LDAP versus OpenID

An Overview of the CAS Architecture

  • System components
  • CAS Server
  • CAS clients
  • Supported protocols
  • Software components
    • Spring MVC/Spring Webflow
    • Ticketing
    • Authentication

Building CAS as an Overlay Project

  • Building and deploying with Gradle, Maven and Docker
  • Using custom and third-party source code
  • Managing dependencies

Configuring Authentication in CAS

  • Orchestrating authentication handlers with the authentication manager
  • Selecting authentication handlers and schemes
  • Testing the default authentication scheme
  • Principal Resolution
  • Transforming the user ID
  • Setting up "Remember Me" for long-term authentication
  • Configuring proxy authentication
  • Multi-factor authentication (MFA)
  • Limiting failed login attempts through login throttling
  • Configuring an SSO session cookie

Attribute Resolution and Release

  • Principal-ID attribute: receiving the authenticated user ID
  • Attribute release policy: releasing attributes to applications
  • Caching attributes: caching resolved attributes
  • Encrypting attributes: conditionally encrypting attributes

Troubleshooting

Summary and Next Steps

Requirements

  • A solid understanding of core security concepts such as authentication and authorisation.
  • Familiarity with Linux and command-line operations.

Audience

  • System administrators
 7 Hours

Number of participants


Price per participant

Provisional Upcoming Courses (Require 5+ participants)

Related Categories