CAS at Indiana University consists of a single login on the web that authenticates againsts the university's kerebos system. It maintains a session for 8 hours or until the user closes there browser that keeps them authenticated for using any application that uses CAS for authentication.  The goal is to allow users to authenticate once and then be able to go freely between any other site that requires university authentication.

The process is as follows. A user clicks a button to login to CAS, CAS then checks to see if the user is already authenticated (checks to see if there is an open session) if so then CAS sends back a ticket and the username to the referer. If the user is not authenticated it prompts for a username and password and then it sends a ticket and the username back to the referer. 

I think that about sums it up. just in case i missed anything.. 

http://kb.iu.edu/data/akui.html  Official IU knowledge base entry.

-Chad 

Ok. Well we have this implemented in our wG install. and it works great. Ill attach it below. 

Can you put this in the contributions :) 

Ehab Heikal

www.valuecms.com, www.elmotaheda.com , www.mashy.com

Quote: An eye for an Eye only helps make the whole world blind

Gandhi

I attached the required files to this thread. I think the code needs to be cleaned up a lot before it can become a contribution. I do not know how to write a wobject, so the cas module has some 'junk' in it; left over or unused methods. Feel free to clean it up and add it to contributions. If you need any assistance I can try to help.

-Chad