Polis: CAS Authentication?

[edsu]

This question might be wrongheaded as I am brand new to Polis. A group of students at my university is considering bringing up an instance of Polis to help in student governance. The university provide a Central Authentication Service (CAS) service for single sign on. We were wondering if it was possible to have Polis use CAS for logging in? Has anyone tried anything like that before?

[metasoarous]

Hi @edsu. Thanks for posting this issue! Great to hear that your school is looking to do this.

We have been talking about setting up OpenAuth configuration for Polis. Would your CAS work with OpenAuth? If so that would seem to be the most straightforward path there.

Thanks again!

[patcon]

Maybe relevant? Though maybe very CAS-server-specific https://apereo.github.io/cas/5.1.x/protocol/OAuth-Protocol.html

Also, hi @edsu 👋

[edsu]

Thanks for these suggestions! I'm going to inquire if our CAS service (Shibboleth IdP v3.3.1) supports OAuth. But it looks like the answer at the moment is no if this is correct:

https://wiki.shibboleth.net/confluence/display/DEV/Supported+Protocols

[patcon]

If you look up "xid" in knowledge base, there should general context on how to create a generalized wrapper around polis embeds, which could use any login system one cares to write code for.

[patcon]

If it does support oauth, this is a project I've followed for awhile: Lightweight proxy to sit in front of random simple pages:
https://github.com/bitly/oauth2_proxy (current activity is now in forks, explained in readme)

Perhaps worth someone rigging up a generalized example and upstreaming it into https://github.com/pol-is/polis-examples :)