Single Sign On Integration with CAS

To enable Single Sign On integration with CAS, use the following steps:

1. Enable the CAS filter in dotmarketing-config.properties

Note: It is strongly recommended that all changes to the dotmarketing-config.properties file be made through the dotCMS configuration plugin.

#Frontend Cas filter
FRONTEND_CAS_FILTER_ON=true

2. Add the CAS jar to the classpath

3. Configure filters and servlets in web.xml

Note: It is strongly recommended that all changes to the web.xml file be made through a ROOT plugin.

<context-param>
   <param-name>edu.yale.its.tp.cas.proxyUrl</param-name>
   <param-value>
      https://mydomaine:8443/cas/proxy
   </param-value>
</context-param>

<!-- CAS Filters -->
<filter>
   <filter-name>CAS Filter</filter-name>
   <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
   <init-param>
      <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
      <param-value>https://mydomaine:8443/cas/login</param-value>
   </init-param>
   <init-param>
      <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
      <param-value>https://mydomaine:8443/cas/serviceValidate</param-value>
   </init-param>
   <init-param>
      <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
      <param-value>localhost</param-value>
   </init-param>
</filter>
<!-- END CAS Filters -->

<!-- CAS Filter Mappings -->
<filter-mapping>
   <filter-name>CAS Filter</filter-name>
   <url-pattern>/c/portal/login</url-pattern>
</filter-mapping>
<filter-mapping>
   <filter-name>CAS Filter</filter-name>
   <url-pattern>/dotCMS/login</url-pattern>
</filter-mapping>
<filter-mapping>
   <filter-name>AutoLoginFilter</filter-name>
   <url-pattern>/c/portal/login</url-pattern>
</filter-mapping>
<filter-mapping>
   <filter-name>AutoLoginFilter</filter-name>
   <url-pattern>/dotCMS/login</url-pattern>
</filter-mapping>
<!-- END CAS Filter Mappings -->

<!-- CAS Servlet -->
<servlet>
   <servlet-name>casproxy</servlet-name>
   <servlet-class>
      edu.yale.its.tp.cas.proxy.ProxyTicketReceptor
   </servlet-class>
</servlet>
<!-- END CAS Servlet -->

<!-- CAS Servlet Mapping -->
<servlet-mapping>
   <servlet-name>casproxy</servlet-name>
   <url-pattern>/casProxy/*</url-pattern>
</servlet-mapping>
<!-- END CAS Servlet Mapping -->