Giter VIP home page Giter VIP logo

identity-inbound-auth-cas's Introduction

Welcome to the WSO2 Identity Server (IS) CAS inbound authenticator.

WSO2 IS is one of the best Identity Servers, which enables you to offload your identity and user entitlement management burden totally from your application. It comes with many features, supports many industry standards and most importantly it allows you to extent it according to your security requirements. This repo contains Authenticators written to work with different third party systems.

With WSO2 IS, there are lot of provisioning capabilities available. There are 3 major concepts as Inbound, outbound provisioning and Just-In-Time provisioning. Inbound provisioning means , provisioning users and groups from an external system to IS. Outbound provisioning means , provisioning users from IS to other external systems. JIT provisioning means , once a user tries to login from an external IDP, a user can be created on the fly in IS with JIT. Repos under this account holds such components invlove in communicating with external systems.

identity-inbound-auth-cas's People

Contributors

biruntha avatar chamathns avatar connector-store-rw-bot avatar deshankoswatte avatar dinikasen avatar elilmatha avatar gayashanbc avatar gdrdabarera avatar hariss63 avatar hasinthaindrajee avatar isurad avatar janakamarasena avatar kanapriya avatar keerthu avatar madurangasiriwardena avatar maheshika avatar naderjafari avatar nilukasripalim avatar omindu avatar pulasthi7 avatar senthalan avatar shakila avatar shayanmalinda avatar somindatommy avatar thanujalk avatar wso2-jenkins-bot avatar

Stargazers

 avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

identity-inbound-auth-cas's Issues

CAS connector with WSO2 IS 5.3

Dears ,
Greetings ,,, first i would like to appreciate your great work in the CAS connector .
i used it with WSO2 IS 5.2.0 and its working well , but when i upgrade it to 5.3.0 i faced some issues in redirection between client (my Application) and WSO2 (CAS server ) .
the error message that appears was :
"500 internal server error "

then i traced back the error log "wso2carbon.log" , but i can't find any type of error.
so kindly help me to make it work .
thanks in advance .

WSO2 CAS Plugin Proxy Support Missing

Issue with CAS Protocol Proxy Support. Not fully implemented as per Specification.
We need support.

https://apereo.github.io/cas/4.2.x/protocol/CAS-Protocol-Specification.html

/serviceValidate [ service ticket validation [CAS 2.0] ]

  1. No support for pgtUrl [OPTIONAL]
  • the URL of the proxy callback. Discussed in Section 2.5.4. As a HTTP request parameter, the “pgtUrl” value MUST be URL-encoded as described in Section 2.2 of RFC 1738 [4].
  1. Response doesn't contain
    cas:proxyGrantingTicketPGT...</cas:proxyGrantingTicket>

/proxyValidate [ service/proxy ticket validation [CAS 2.0] ]

  1. No support for pgtUrl [OPTIONAL]
  • the URL of the proxy callback. Discussed in Section 2.5.4. As a HTTP request parameter, the “pgtUrl” value MUST be URL-encoded as described in Section 2.2 of RFC 1738 [4].
  1. Response doesn't contain
    cas:proxyGrantingTicketPGT...</cas:proxyGrantingTicket>

  2. Response doesn't contain
    cas:proxies
    cas:proxyhttps://proxy2/pgtUrl</cas:proxy>
    cas:proxyhttps://proxy1/pgtUrl</cas:proxy>
    </cas:proxies>

/proxy [ proxy ticket service [CAS 2.0] ]

Not implemented

/p3/serviceValidate [ service ticket validation [CAS 3.0] ]

Not implemented

/p3/proxyValidate [ service/proxy ticket validation [CAS 3.0] ]

Not implemented

User Attributes are not supplied in CAS response

Description:
Based on this document :
https://docs.wso2.com/display/ISCONNECTORS/Configuring+CAS+Inbound+Authenticator
I created a Service Provider and configure all needed.
I need to some Claim like email address and mobile so i define this Claims in Claim Configuration section based on document.
Also i run the cas-client-webapp and configure that to work with my service provider.
But when i login with a user and return to client side the user attributes is null like below :
image

Suggested Labels:

Suggested Assignees:

Affected Product Version:

OS, DB, other environment details and versions:

Steps to reproduce:

Related Issues:

Issue with CAS on wso2is 5.3, 5.6 and 5.7 "server 500 error"

Description:
The issue is i am getting server error 500 in 2 cases.
Case 1: when the url that i want to be behind CAS is https://example.com/hello/ but i only configure CAS URL in the wso2 identity server - service provider to be https://example.com/.

Case 2: When i click on the logout i am fronted with the same error "server error 500"

ERROR {org.apache.catalina.core.StandardWrapperValve} - Servlet.service() for servlet [bridgeservlet] in context with path [/] threw exception
org.wso2.carbon.identity.application.authentication.framework.inbound.FrameworkRuntimeException: org.wso2.carbon.identity.application.authentication.framework.inbound.FrameworkRuntimeException: No IdentityProcessor found to process the request

Suggested Labels:
issue, 2.0.2, improvement

Suggested Assignees:
@Shakila @Kanapriya

Affected Product Version:
2.0.1, 2.0.2, wso2is-5.3.0, wso2is-5.6.0, wso2is-5.7.0

OS, DB, other environment details and versions:
Linux - Debian, Postgresql

Steps to reproduce:
I followed this guide https://docs.wso2.com/display/ISCONNECTORS/Configuring+CAS+Inbound+Authenticator
when i do any of the described issue on the top it breaks.

Related Issues:
wso2/product-is#3861

Add Single Logout functionality

Description:

Dear members,
There is a need to implement SLO functionality for this extension.
I've started implementation, Please let me know what action you propose to take.

Best Regards.

Suggested Labels:
enhancement,

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.