RSE-Sheffield / RSEAdmin

A Resource Allocation and Finance tool for RSE Groups
https://rseadmin.readthedocs.io/en/latest/
MIT License
24 stars 6 forks source link

Login via CAS (Central Authentication Service, aka university account) #199

Open Robadob opened 1 year ago

Robadob commented 1 year ago

This would allow users to login via their university account (like how Google/Kaltura login is handled). This would reduce people needing to maintain a second set of credentials.

If necessary could maintain old login flow for external people without a university account.

By attaching a uni username to each existing account, it could act as a "whitelist" on the site, to only permit certain usernames to login.

It should be pretty easy to fold in via django-cas-ng, I've just integrated it into a site I'm building for COM4521 (although it was only setup for https:// which added a little extra faff to my dev server).

It's necessary to request CAS registration from IT services, however that's simply a case of providing them the domain and asking (was handled in 24h).