-
Notifications
You must be signed in to change notification settings - Fork 416
CAS Integration Options
CAS Integration
This page details several possible methods of integrating mapfish-print with CAS. This page contains concepts and brainstorming and thus some suggestions may not be useful in practice or in particular infrastructures. Please read the page and using the provided information decide what is the most useful solution for your particular case.
There are two integration levels to consider when integrating with CAS:
- Configure Mapfish Print to authenticate the current user with CAS and use that authentication and authorization to control access to the various protected resources within Mapfish Print.
- Configure Mapfish Print to authenticate the current user with CAS and use that authentication to access protected Geoserver Resources
In Mapfish Print certain resources (templates, configurations) can be secured so that only users with particular authorization (based on Roles) will be permitted to access the resources. The reason that one might decide to secure particular templates/configurations is because it is possible to configure templates to directly connect to databases or other servers. In these cases authentication information might be included in the templates and thus the resulting reports could include sensitive/private information.
The default configuration uses basic authentication to authenticate users. The users are explicitely declared in the spring application context. However the full power of Spring Security is available to those who wish to deploy Mapfish Print and secure particular resources.
CAS is one of the Spring Security options available. See http://docs.spring.io/spring-security/site/docs/4.0.1.RELEASE/reference/htmlsingle/#cas for details on configuring Mapfish Print to work with CAS.
At the time of this writing development work needs to be done to get MFP to authenticate with CAS and then send the authentication information to the Geoserver. See https://github.com/mapfish/mapfish-print/issues/255 for the status of the changes that are required for this topic.