CAS: Setting Up a Single-Sign-On Authentication Server培训

课程编码

cas

课程时长

7 小时 通常来说是1天,包括中间休息。

要求

  • An understanding of security concepts (authentication, authorization etc.)
  • Familiarity with Linux and the command line

课程概览

CAS或Central Authentication Service是一种用于Web的开源,企业级单点登录协议。 CAS允许用户使用单点登录访问多个应用程序,并允许Web应用程序对用户进行身份验证,而无需授予用户访问用户密码的权限。 CAS有一个Java服务器组件和用PHPPL/ SQLJava编写的各种客户端库。

在本课程中,我们将讨论CAS的架构和功能,并练习安装和配置CAS服务器。在课程结束时,参与者将了解CAS的SSO(单点登录认证)实施以及部署和管理自己的认证服务器的必要实践。

听众

  • 系统管理员

课程形式

  • 部分讲座,部分讨论,重点实践练习

Machine Translated

课程大纲

Introduction

  • The case for SOS (Single-Sign-On-Authentication)
  • CAS vs LDAP vs OpenID

An overview of the CAS architecture

  • System components
  • CAS Server
  • CAS clients
  • Supported protocols
  • Software components
    • Spring MVC/Spring Webflow
    • Ticketing
    • Authentication

Building CAS as an Overlay project

  • Building and deploying with Gradle, Maven and Docker
  • Using custom and third-party source
  • Managing dependencies

Configuring authentication in CAS

  • Orchestrating authentication handlers with authentication manager
  • Choosing authentication handlers and schemes
  • Testing the default authentication scheme
  • Principal Resolution
  • Transforming the user id
  • Setting up "Remember Me" long-term authentication
  • Setting up proxy authentication
  • Multi-factor authentication (MFA)
  • Limiting failed login attempts with login throttling
  • Configuring an SSO session cookie

Attribute resolution and release

  • Principal-Id attribute: receiving authenticated userid
  • Attribute release policy: Releasing attributes to applications
  • Caching attributes: Caching resolved attributes
  • Encrypting attributes: Conditionally encrypting attributes

Summary and Conclusion

课程分类

相关课程

促销课程

订阅促销课程

为尊重您的隐私,我公司不会把您的邮箱地址提供给任何人。您可以享有优先权和随时取消订阅的权利。

我们的客户

is growing fast!

We are looking to expand our presence in China!

As a Business Development Manager you will:

  • expand business in China
  • recruit local talent (sales, agents, trainers, consultants)
  • recruit local trainers and consultants

We offer:

  • Artificial Intelligence and Big Data systems to support your local operation
  • high-tech automation
  • continuously upgraded course catalogue and content
  • good fun in international team

If you are interested in running a high-tech, high-quality training and consulting business.

Apply now!

该网站在其他国家/地区