Configure CAS authentication

Central Authentication Service (CAS) is an open-source enterprise-level single sign-on solution designed to provide a reliable single sign-on method for the Web application system. H3C U-Center platform integrates CAS Server. The cloud desktop management platform (Space Console) can achieve single sign-on through CAS authentication after integrating with U-Center. When you access the cloud desktop management platform after CAS authentication configuration, you will be redirected to the login page of U-Center. The dashboard page of the cloud desktop management platform automatically opens after you correctly enter the username and password of the related U-Center administrator on the login page.

Restrictions and guidelines

The current version of CAS Server supported by Space Console is 5.3.16.
After CAS authentication is enabled, the idle timeout configuration for operators will not take effect.
You cannot log in to the cloud desktop management platform if one of the following conditions exists:
- The CAS authentication settings are incorrect.
- The connection between the management platform and CAS Server is abnormal.
- CAS Server operates incorrectly.
To resolve this issue, perform the following operations:
1. Clear the cache of the browser.
2. Access http://{ip:8083}/workspace/#/login?forceSkipSSO=1 or https://{ip:8084}/workspace/#/login?forceSkipSSO=1 to open the login page of the cloud desktop management platform without triggering the SSO process.
3. Log in to the management platform, correct the CAS authentication settings or disable CAS authentication.

Prerequisites

Enable the casServer service on U-Center.

Procedure

From the left navigation pane, select System > Auth Collaboration > Primary Auth > CAS Authentication.
Click to Server Info. Enable Collaboration with CAS Authentication, configure CAS authentication settings, and then click Save.

Parameters

Collaboration with CAS Authentication: Select whether to enable CAS authentication. By default, this feature is disabled.
Authentication Protocol: Only CAS is available.
CAS Authentication Login Address: Basic address of the CAS Server end. This address is the root URL of the CAS service deployed on the U-Center server. The format is http{s}://{U-Center platform IP address}:{U-Center platform access port number}/cas or http{s}://{U-Center platform IP address}:{U-Center platform access port number}/. Specify /cas or / based on the configuration when the casServer service is enabled on the U-Center.
CAS Authentication Login Interface: URL for CAS authentication and login. This address redirects the user to the login page of U-Center. It is related to the settings configured to enable the casServer service on U-Center, for example, http://{ip}:{port}/cas/login?loginUrl=http://{ip}:{port}/uclogin/view/login.html.