Vote #64306
未完了SSO Authentication (CAS Jasig)
0%
説明
It should be very interesting to integration SSO authentication to permit user to be automaticaly identified if they are already authenticated against an SSO solution. CAS Jasig is a good solution, a ruby on rails client is available : http://www.ja-sig.org/wiki/display/CASC/Ruby+on+Rails+CAS+Client.
So that, user will be identified but SSO can just give back the username. So it can't replace ldap at all, but can be used with ldap : SSO give the username and ldap is used to retrieve information like givenname and email addresse.
journals
An additional possibility is using OpenID as single sign on solution. It can work with LDAP as well.
http://www.openid-ldap.org/
--------------------------------------------------------------------------------
See this patch:
http://blogs.igalia.com/mrego/2009/07/22/casify-redmine/
--------------------------------------------------------------------------------
Attached is a patch which provides CAS functionality, along with settings to boot. Allows both forced and optional CAS login. Don't know if it's up to code standards, but it's a start, and I'm willing to work on it further. Developed on the Debian version, but applied cleanly to HEAD. Haven't tested it on HEAD, though.
--------------------------------------------------------------------------------
Whoops. Previous patch I attached had bugs on head. This patch applies cleanly, and should work perfectly. I'm also working on a few improvements to the logout process, but that requires changes to rubycas-client first.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
How setup Redmine with CAS on the last stable version of redmine ? (2.0.3)
--------------------------------------------------------------------------------
"Same question as Thomas", will this patch work with Redmine 2.x (esspecially 2.1)?
And next question is if this can be implemented as the plugin?
--------------------------------------------------------------------------------
+1 to implement this plugin, quite useful in enterprise environment, and suitable for modern ALM systems
--------------------------------------------------------------------------------
related_issues
relates,New,940,RADIUS authentication support
relates,Closed,1131,Add support for alternate (non-LDAP) authentication
relates,New,2965,CAS Authentication
relates,New,12330,Integrate Kerberos Authentication