Hanzo IAM as a CAS server
Use Hanzo IAM as a Central Authentication Service (CAS) server for CAS 1.0, 2.0, and 3.0.
Overview
Hanzo IAM can act as a CAS server and supports CAS 1.0, 2.0, and 3.0.
The CAS URL prefix is: <iam-host>/cas/<organization>/<application>. Example for https://iam.hanzo.ai, org casbin, app cas-java-app:
/loginendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/login/logoutendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/logout/serviceValidateendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/serviceValidate/proxyValidateendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/proxyValidate/proxyendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/proxy/validateendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/validate/p3/serviceValidateendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/p3/serviceValidate/p3/proxyValidateendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/p3/proxyValidate/samlValidateendpoint:https://iam.hanzo.ai/cas/casbin/cas-java-app/samlValidate
See the CAS protocol specification for parameters and versions.
Example
The Apereo CAS sample Java webapp and Java CAS client work with Hanzo IAM. Point the client at your Hanzo IAM CAS base URL.
The CAS configuration is located in src/main/webapp/WEB-INF/web.yml.
By default, this app uses CAS 3.0, which is specified by the following configurations:
<filter-name>CAS Validation Filter</filter-name>
<filter-class>org.jasig.cas.client.validation.Cas30ProxyReceivingTicketValidationFilter</filter-class>
If you want to protect this web app using CAS 2.0, change the CAS Validation Filter to the following:
```xml
<filter-name>CAS Validation Filter</filter-name>
<filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>
For CAS 1.0, use the following:
```xml
<filter-name>CAS Validation Filter</filter-name>
<filter-class>org.jasig.cas.client.validation.Cas10TicketValidationFilter</filter-class>
For all instances of the `casServerUrlPrefix` parameter, change them to:
```xml
<param-name>casServerUrlPrefix</param-name>
<param-value>http://iam.hanzo.ai/cas/casbin/cas-java-app</param-value>
For all instances of the `casServerLoginUrl` parameter, change them to:
```xml
<param-name>casServerLoginUrl</param-name>
<param-value>http://iam.hanzo.ai/cas/casbin/cas-java-app/login</param-value>
If you need to customize more configurations, see the [Java CAS client GitHub Repository](https://github.com/apereo/java-cas-client) for detailed information.How is this guide?
Last updated on