topic Acegi - CasAuthenticationProvider in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/acegi-casauthenticationprovider/m-p/152099#M106777 <HTML><HEAD></HEAD><BODY><SPAN>Is it possible to configure CasAuthenticationProvider in the authentication-services-context.xml and get CAS-Alfresco Integration?</SPAN><BR /><SPAN>If it's not only a configuration problem and requires some programming, what I have to change inside the alfresco sources in order to get the above integration?</SPAN><BR /><SPAN>(My final goal is to make Web Services SOAP messages to be parsed correctly if I send CAS-ticket in the SOAP body (Proxy Ticket) - not native alfresco TICKET_</SPAN><BR /><SPAN>I want to provide CAS-SSO together with Alfresco Web Services. AuthenticationService - startSession("admin", "password") is not good for me as I have to use this way of authentication in my portlet without SSO now).</SPAN><BR /><BR /><SPAN>By the way… Acegi Security is deprecated. Why it's still used instead of the Spring Security?</SPAN></BODY></HTML> Sat, 05 Jul 2008 19:39:44 GMT dvelasov 2008-07-05T19:39:44Z Acegi - CasAuthenticationProvider https://connect.hyland.com/t5/alfresco-archive/acegi-casauthenticationprovider/m-p/152099#M106777 Is it possible to configure CasAuthenticationProvider in the authentication-services-context.xml and get CAS-Alfresco Integration?If it's not only a configuration problem and requires some programming, what I have to change inside the alfresco sources in order to get the above integration?(My final Sat, 05 Jul 2008 19:39:44 GMT https://connect.hyland.com/t5/alfresco-archive/acegi-casauthenticationprovider/m-p/152099#M106777 dvelasov 2008-07-05T19:39:44Z Re: Acegi - CasAuthenticationProvider https://connect.hyland.com/t5/alfresco-archive/acegi-casauthenticationprovider/m-p/152100#M106778 <HTML><HEAD></HEAD><BODY><SPAN>Well… I figured out the probable solution to this problem. I'm going to write my own web service&nbsp; and include it in alfresco.war.</SPAN><BR /><SPAN>The second step is to analyze how to check (where to place this validation) CAS credentials which I'm going to send via SOAP and call authentication.setAuthenticated(true) on the server side.</SPAN><BR /><BR /><SPAN>Maybe the sequence of operations looks like the following:</SPAN><BR /><SPAN>1. Show the guest interface of the portlet and check for ST.</SPAN><BR /><SPAN>2. A user clicks on the link </SPAN><A href="https://server/cas/login?service=portletURL" rel="nofollow noopener noreferrer">https://server/cas/login?service=portletURL</A><SPAN> named "Log in", for example (due to TGC the SSO is provided)</SPAN><BR /><SPAN>3. If ST is present then call CAS/serviceValidate?blah-blah-blah…&amp;pgtUrl=blah-blah-blah</SPAN><BR /><SPAN>4. PGT is received by "my" custom servlet (pgtUrl) (Maybe I have to extend the well-known CAS servlet in order to parse the CAS HTTP-GET which contains pgtIou and pgtId) inside the same webapp context as "my" portlet.</SPAN><BR /><SPAN>5. The above servlet sends PGT to CAS and it returns PT.</SPAN><BR /><SPAN>6. After that the servlet (pgtUrl) sends PT to Alfresco MyCasAuthenticationWebService via SOAP</SPAN><BR /><SPAN>7. MyCasAuthenticationWebService users CAS/proxy?…. to get user name</SPAN><BR /><BR /><SPAN>to be continued…..</SPAN></BODY></HTML> Mon, 07 Jul 2008 08:34:20 GMT https://connect.hyland.com/t5/alfresco-archive/acegi-casauthenticationprovider/m-p/152100#M106778 dvelasov 2008-07-07T08:34:20Z