CAS - Central Authentication Service,single sign-on for the web.
- Java (Spring Webflow/MVC servlet) server component
- Pluggable authentication support (LDAP, database, X.509, 2-factor)
- Support for multiple protocols (CAS, SAML, OAuth, OpenID)
- Cross-platform client support (Java, .Net, PHP, Perl, Apache, etc)
- Integrates with uPortal, Liferay, BlueSocket, Moodle, and Google Apps to name a few
CAS请求认证的时序图:
The key concepts:
TGT-Ticket Granting Ticket,stored in the CASTGC cookie,represents a SSO session for a user
ST - Service Ticket,transmitted as a GET parameter in urls,stands for the access granted by the CAS server to the cassified application for a specific user