Versions Compared

Old Version 2

changes.mady.by.user Former user (Deleted)

Saved on

compared with

New Version Current

changes.mady.by.user Former user (Deleted)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3
Panel
bgColor#FFFFCE
titleborderStyledashed
title

ENTR:Main Scenario ENTR:Extensions ENTR:Notes ENTR:References ENTR:Associated Modules ENTR:Implementations ENTR:Advice and ExperienceENTR:Contributors

Goal:

Anchor
goal
goal
Excerpt

Enable use of CAS gateway feature to allow Sakai to take maximum advantage of CAS SSO for providing the most valuable content to a user that it can on the first screen that user sees.


Version:
Anchor
version
version
?
DG Priority:
Anchor
priority
priority
?
Status:
Anchor
support
support
back of napkin
Scope:
Anchor
scope
scope
?
Preconditions:
Anchor
pre
pre
?
Success end:
Anchor
success
success
When a user navigates to Sakai having already established a CAS SSO session, Sakai uses the CAS gateway feature to detect participation in the SSO session, authenticate, and take the user directly to the more valuable authenticated content. If no SSO session in place, present non-logged-in view as usual.
Failed end:
Anchor
fail
fail
?
Actors:
Anchor
actors
actors
?
Primary Actor:
Anchor
actor
actor
?
Trigger:
Anchor
trigger
trigger
?
Security Concerns:
Anchor
security
security

Logging:
Anchor
logging
logging
At higher logging levels, something to log is the result of each gateway check to profile how many users' experiences are actually improved by this feature.
Performance Concerns:
Anchor
performance
performance
Adds a trip to CAS on the first request to Sakai. Implemented badly, adds a round trip to CAS on every request (let's not do that.)

Anchor
main
main

Panel
borderStyle
bgColor#FFFFCE
borderStyledashed
titleMain Success Scenariodashed

Replaces the unauthenticated default user experience with the personalized, customized, authenticated user experience on the very first request to Sakai where possible. User need not click "log in" to log in when already participating in an SSO session. If not participating in an SSO session, user sees non logged in user experience per usual and continues to have opportunity to log in.

Anchor
ext
ext

Panel
bgColor#FFFFCE
borderStyledashed
titleExtensions
borderStyledashed

Anchor
refs
refs

Panel
bgColor#FFFFCE
borderStyledashed
titleReferencesborderStyledashed

Anchor
modules
modules

Panel
borderStyle
bgColor#FFFFCE
borderStyledashed
titleAssociated Modulesdashed

JA-SIG Central Authentication Service, Yale Java CAS Client library?

Anchor
impl
impl

Panel
bgColor#FFFFCE
borderStyledashed
titleImplementations
borderStyledashed

Anchor
advice
advice

Panel
borderStyle
bgColor#FFFFCE
borderStyledashed
titleAdvice and Experiencedashed

Gateway is a little thorny to get right in terms of session management, but is certainly feasible (especially with the talent available in the Sakai community!)

...

Name <email>

Institution

Notes

~andrew.petro@yale.eduFormer user (Deleted)

Yale University

initial notes