Contributed by | University of Pennsylvania |
Purpose | Enables the Grouper UI to authenticate using the single sign on at penn. |
How it works | Provides the Penn websec client library and configures Servlet API Filters to manage authentication. To use this, if the apache websec plugin is installed, just go to the app from the browser, you will be prompted to login, then forwarded to the app. If you are developing without the apache module, go to a url like this: https://rosetta.upenn.edu/cgi-bin/websec/websec_authform?app=StudentHome&websec_page=http://localhost:8090/grouper/callLogin.do |
Instructions | This contribution is designed to be run from within the normal Grouper
UI build process and is run by adding : <ant antfile="build.xml" target="webapp" dir="${contrib.dir}/penn-auth" inheritrefs="true" /> to the build file. Normally you would include this line in the build file defined by the additional.build property. Before building this contribution copy build.properties.template to build.properties and modify the values within to match your system. In order to prevent a standard authentication pop-up appearing after you have CAS authenticated, you must override the callLogin action in struts-config.xml, so that the user is redirected to /home.do rather than /login.do <action path="/callLogin" scope="request" type="edu.internet2.middleware.grouper.ui.actions.CallLoginAction" unknown="false" validate="false"> <forward name="callLogin" path="/home.do" redirect="true"/> </action> Rather than edit the struts-config.xml file provided with the Grouper UI, you should extend the UI as described at https://wiki.internet2.edu/confluence/display/GrouperWG/Customizing+the+Grouper+UI+v1.0 |