Thanks Misagh and All for your inputs. I am Sorry if I am asking basic questions limited knowledge after reading the documentation, but will be vary helpful if I get experts inputs on this.
Solution-1 : Use CAS Proxy ------------------------------------ If I use CAS Proxying does this impact any performance due to multiple redirects? Solution-2: Use CAS REST API ------------------------------------------ If App-A backend calls App-B using REST API how can APP-A pass TGT to CAS (I mean initial Cookie which CAS gave back as initial authentication)? Thanks, Ganga On Thursday, January 26, 2017 at 3:51:02 AM UTC-5, Misagh Moayyed wrote: > > Yes, it's the same thing. You can use proxying, or the REST API, or > OAuth2/OpenID Connect. > > On Thursday, January 26, 2017 at 11:40:09 AM UTC+3:30, C. C. Tang wrote: >> >> Thank you very much. I didn't notice that the 5.x manual page is having a >> use case description since I am using 4.2.x and keep reading the 4.2.x >> documentation. (and google always show me doc pages of old CAS website) >> >> I think this matches Gangadhar's use case. >> However for my case, it is not App-A consuming App-B but the client >> contacting App-B directly by client side ajax request to get data. Is CAS >> covering this kind of use case? >> >> Thanks a lot. >> C.C. >> >> On Thursday, January 26, 2017 at 3:42:42 PM UTC+8, Misagh Moayyed wrote: >>> >>> And did you get a chance to read this, which describes exactly what >>> you’re explaining here? >>> >>> https://apereo.github.io/cas/5.0.x/installation/Configuring-Proxy-Authentication.html >>> >>> >>> -- >>> Misagh >>> >>> From: Gangadhar Vulpay <[email protected]> >>> Reply: [email protected] <[email protected]> >>> Date: January 26, 2017 at 5:15:03 AM >>> To: CAS Community <[email protected]> >>> Subject: Re: [cas-user] Re: CAS Proxy vs CAS Rest protocol >>> >>> Right now we are planning to protect Application B by CAS. But as part >>> of initial changes we are trying not to change application C (I mean NO Not >>> protected by CAS). >>> >>> >>> On Wednesday, January 25, 2017 at 6:02:44 PM UTC-5, Misagh Moayyed >>> wrote: >>>> >>>> Are applications B and C protected by CAS too? >>>> >>>> On Thursday, January 26, 2017 at 12:45:17 AM UTC+3:30, Gangadhar Vulpay >>>> wrote: >>>>> >>>>> Hi Misagh, >>>>> >>>>> I vary sorry for not clear about by question. >>>>> >>>>> I was trying to do a POC using CAS SSO provider and below is my use >>>>> case >>>>> >>>>> 1. Application A (Web Application) - Assume we make this Cassify >>>>> 2. Application B (Webservice) >>>>> 3. Application C (Webservice) >>>>> >>>>> "App-A" get the data from "App-B"(Webservice) but this internally >>>>> calls App-C(Webservice) >>>>> >>>>> I was trying to understand what is the best way to do above use case. >>>>> >>>>> I was thinking how to use CAS REST Protocol in this case but not clear >>>>> is this the right way to do this. >>>>> >>>>> >>>>> Thanks, >>>>> Ganga >>>>> >>>>>> >>>>>> -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/e45b730d-66de-47a8-ae95-201422906660%40apereo.org.
