Solution-1 : Use CAS Proxy ------------------------------------ If I use CAS Proxying does this impact any performance due to multiple redirects? Nope. There is going to be more chatter on the wire, but I don’t foresee any perf issues. Post back if you find any.
Solution-2: Use CAS REST API ------------------------------------------ If App-A backend calls App-B using REST API how can APP-A pass TGT to CAS (I mean initial Cookie which CAS gave back as initial authentication)? My apologies for not being clearer. Your App A is nonetheless going to obtain a proxy ticket for app B anyway. That is never going away. It is going to involve proxying either way. The deal with the REST API is, you [app A] is going to hold onto the TGT and effectively maintain SSO, rather than letting CAS do that. You are to NEVER EVER share the TGT with anyone. Remember that the REST API deals with no cookie business. It’s a stateless call. This is really more a question of who receives the user credentials. You either use CAS to submit credentials and ask for a PT for app B, or App A gets credentials and submits them to CAS and then asks for a PT for app B. The former is more common and in some cases easier to maintain/understand/implement. Occam’s razor. Other options other than proxying would be to let app B authenticate via non-interactive authn means, such as basic authn or JWTs, etc. Or you leverage an OIDC profile that essentially is very similar to proxying in concept which is designed to handle non-browser authn scenarios. HTH. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.588bcbb4.614fac47.158e%40unicon.net.
