[Zope3-Users] Re: Remote authentication

[David Pratt]

Hi Maciej. I'll definitely check this out and look for docs on the 
plugin. It sounds very promising since it is a working solution for Z2 
:-) On top of it, there ought to be good hints in Z2's PAS for doing 
something in Z3. Hopefully it can be worked in to some functionality for 
users/groups for z3. Many thanks.

Regards,
David

Maciej Wisniowski wrote:
> Hi!
> 
> For single sign on there is also CAS (Central Authentication Service).
> We're sucessfully using this in our Zope2 apps. It has plugin for PAS
> in Zope2 (CAS4PAS). CAS also works with other systems - plugins for
> java, php and other exists.
> 
> Important thing here is to distinguish between authentication and
> authorization. For example SSO like CAS can only tell you if your
> user is authenticated. It won't tell you if he has some permissions
> and/or roles to do something. But with PAS you can write another plugin
> that will set proper roles for user etc.
> 
>