Single sign-on

CASAuthenticator

Single sign-on functionality through a Central Authentication Service (CAS) has been added to DSpace. A special SiteAuthenticator, called CASAuthenticator, implements the CAS functionality.

To use the feature you need to set the webui.site.authenticator property in your dspace.cfg configuration file as below.

webui.site.authenticator = org.dspace.app.webui.CASAuthenticator
Furthermore, a few CAS specific properties needs to be set as well.
cas.server.url=http://localhost:8080/cas/index.jsp
cas.validate.url=http://localhost:8080/cas/validate
cas.logout.url=http://localhost:8080/cas/logout

Modify URL's accordingly to your setup.

Property cas.server.url specifies the URL to the CAS login page. Property cas.validate.url specifies the URL where a CAS ticket can be validated. Property cas.logout.url specifies the URL to log out from CAS. As a consequence the browser removes any cookies related to CAS and if the user hits a page that requires authentication he or she is redirected to the CAS login page.

By-pass CAS

For administrative purposes it can be usefull to by-pass CAS authentication. To do that supply the parameter bypasscas with your HTTP request. In that case, authentication fails back to simple authentication (that is SimpleAuthenticator).