谈谈CAS

CAS - Central Authentication Service,single sign-on for the web.

Java (Spring Webflow/MVC servlet) server component

Pluggable authentication support (LDAP, database, X.509, 2-factor)

Support for multiple protocols (CAS, SAML, OAuth, OpenID)

Cross-platform client support (Java, .Net, PHP, Perl, Apache, etc)

Integrates with uPortal, Liferay, BlueSocket, Moodle, and Google Apps to name a few

CAS请求认证的时序图：



The key concepts:

TGT-Ticket Granting Ticket,stored in the CASTGC cookie,represents a SSO session for a user

ST - Service Ticket,transmitted as a GET parameter in urls,stands for the access granted by the CAS server to the cassified application for a specific user

参考资源：

1.http://jasig.github.io/cas/4.0.x/index.html