Adding support for CAS for SSO & SLO

Ylianst / MeshCentral

A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.

https://meshcentral.com

Apache License 2.0

4.09k stars 549 forks source link

Adding support for CAS for SSO & SLO #4279

Open xraive opened 2 years ago

xraive commented 2 years ago

First, I'd like to say thank you for your great work on this project. I just came to know about it recently. I have a feature request and would like to know your thoughts on it.

It would be great if you would add support for CAS. It's a single platform that supports SSO & SLO using the following below.

Supported Protocols (not a complete list)

CAS, OpenID, OAuth, OpenID Connect, WS Federation, SAML1, SAML2, REST Protocol

Some of the supported Authentication Methods

JAAS, LDAP, RDBMS, X.509, Radius, SPNEGO, JWT, Remote, Trusted, BASIC, Apache Shiro, MongoDB, Pac4J and more.

MFA Providers

Duo Security, Authy Authenticator, Acceptto, YubiKey, RSA/RADIUS, WiKID, Google Authenticator, FIDO U2F, CAS Simple, Swivel Secure, Custom (custom mfa)

Ylianst commented 2 years ago

Currently MeshCentral uses PassportJS. I don't know about CAS, you have a link to it?

Ylianst commented 2 years ago

I think this is it: https://apereo.github.io/cas/6.1.x/index.html. I have to look into is, MeshCentral is a pure NodeJS application which makes it easy to install and use. So, I tend to look at any solution that matches this.

MeshCentral always support a lot of these protocols. I have not added Duo MFA yes, I could look into it.

xraive commented 2 years ago

I think this is it: https://apereo.github.io/cas/6.1.x/index.html. I have to look into is, MeshCentral is a pure NodeJS application which makes it easy to install and use. So, I tend to look at any solution that matches this.

MeshCentral always support a lot of these protocols. I have not added Duo MFA yes, I could look into it.

current documentation (dev) https://apereo.github.io/cas/development/index.html

documentation (stable) https://apereo.github.io/cas/6.5.x/

Thanks for looking into this.

si458 commented 2 years ago

https://github.com/appdevdesigns/passport-cas might help, not sure, I'm just learning passport.js myself

Ylianst commented 2 years ago

Oh dear. This seems like a bunch of work just to get a CAS server setup. Is there by any chance a online CAS server i could use as a sample? It seems like if I had a CAS server, adding support using passport-cas would not be difficult. I am just not sure how far i want to go down this path if it's not going to be widely used.