CAS Authentication

[nwylie]

Hi EspoCRM community,

Currently I am investigating the use of EspoCRM within our organisation.

I'm looking for some guidance about the most appropriate way to extend EspoCRM to support CAS authentication.

The normal flow for CAS authentication can be seen here: https://apereo.github.io/cas/5.2.x/p...-Protocol.html

From what I have seen, I potentially have two options for implementing CAS:

1. I can attempt to create a new Auth Middleware that uses the PHP CAS module (https://github.com/apereo/phpCAS) to establish a session.
2. I could customize the current middleware to accept an $authUsername from a different HTTP header that is not base64 encoded and use the mod_auth_cas (https://github.com/apereo/mod_auth_cas) apache module to handle the authentication.

What would be the best way for me to attempt this customisation?

Regards,
Nick

[tanya]

Hello,
here is the main logic of authentication

https://github.com/espocrm/espocrm/blob/master/application/Espo/Core/Utils/Auth.php

You can add own class in application/Espo/Core/Utils/Authentication and add this class name to the data/config.php