Multitenant CAS login support. Also supports tenant namespacing if supported by CAS server (e.g. CAS server is shared between environments, such as "dev" and "acceptance-test").
put CAS settings in Meteor.settings (for exemple using METEOR_SETTINGS env or --settings) like so (but without the comments):
"cas": {
"relaxSSL": true // relaxes SSL certificate validation of CAS server; useful for development
},
"public": {
"cas": {
"baseUrl": "https://sso.cas-server.com/cas",
"namespace": "staging", // optional, use if CAS server is shared between environments
"serviceParam": "service"
}
}
This happens entirely server-side. Integration using routes for traditional login flow: more details to come.
TODO:
- Remove duplicative Meteor.settings to simplify configuration.