[Zope3-Users] Re: Remote authentication
fairwinds at eastlink.ca
Fri May 11 19:37:17 EDT 2007
Hi Maciej. I'll definitely check this out and look for docs on the
plugin. It sounds very promising since it is a working solution for Z2
:-) On top of it, there ought to be good hints in Z2's PAS for doing
something in Z3. Hopefully it can be worked in to some functionality for
users/groups for z3. Many thanks.
Maciej Wisniowski wrote:
> For single sign on there is also CAS (Central Authentication Service).
> We're sucessfully using this in our Zope2 apps. It has plugin for PAS
> in Zope2 (CAS4PAS). CAS also works with other systems - plugins for
> java, php and other exists.
> Important thing here is to distinguish between authentication and
> authorization. For example SSO like CAS can only tell you if your
> user is authenticated. It won't tell you if he has some permissions
> and/or roles to do something. But with PAS you can write another plugin
> that will set proper roles for user etc.
More information about the Zope3-users