Managing Enterprise security > Managing patron authentication > Setting up a CAS server

Setting up a CAS server

A Central Authentication Service (CAS) allows a user to log in to a group of programs or servers with a single set of credentials. For example, if SirsiDynix Enterprise shares a CAS server with a university network, when a user logs in to the network, the user can open his or her My Account in SirsiDynix Enterprise without being required to enter the username and password. The CAS authentication works for all patron accounts, but does not work for administrator accounts for logging in to the Admin console. For profiles that have been set up to require authentication (see Fields: Add/Edit/Copy Profile), if the patron hasn't logged in to the CAS server, authentication will be required when entering any page of that profile. Otherwise, authentication would be required only when logging in to My Account (unless the user is already logged in to CAS).

Before you connect Enterprise to a CAS authentication server, you will need the URL to your CAS server and have SirsiDynix enable CAS support in your system (for more information, contact your SirsiDynix representative).

After you have set up the connection to the CAS server, you will need to select it as the authentication server in a profile. The CAS integration works best when the Authentication Required option is selected for the profile (for more information, see Fields: Add/Edit/Copy Profile). When Authentication Required is not selected, authentication is slower and less smooth.

To set up a CAS server

Contact SirsiDynix Customer Support to enable CAS support in your system.

Choose Manage Security from the navigation pane.

Choose Manage Authentication Servers.

Choose Add CAS Server.

Complete the fields, as necessary. (For more information, see Fields: Add/Edit CAS Authentication Server.)

Important: Make sure you have selected a web service. SirsiDynix Enterprise cannot authenticate CAS logins without a web service selected.

When you have finished, choose OK.

Choose Manage Profiles and associate the CAS server to the profile:

Choose Edit for the profile with which you want to associate the CAS server.

In the Security Options, select Authentication Required.

Move the web service you selected for the CAS server from the Available list to the Selected list.

Move the CAS server from the Available list to the Selected list.

Choose OK.

Choose Single Sign On Setup.

Choose Add URL and type the CAS URL in the Value field.

The URL must match the CAS URL you entered for the CAS server in Enterprise.

Choose Save.

Contact SirsiDynix Customer Support to restart your web services.