885da5b3d3
* New Crowdin translations by Github Action * Reset broken translated files to English * Ran script/i18n/homogenize-frontmatter.js * Ran script/fix-translation-errors.js * Reverted translated files with parsing and rendering errors * fix malformed liquid * add next directory to exclude list * currentversion -> currentVersion * fix liquid errors * fix liquid errors * Reset broken translated files to English * Ran script/i18n/homogenize-frontmatter.js * Revert /ja/github/authenticating-to-github/about-authentication-with-saml-single-sign-on * Reset known broken translation files LAST * Run script/i18n/homogenize-frontmatter.js Co-authored-by: Crowdin Bot <support+bot@crowdin.com> Co-authored-by: Rachael Sewell <rachmari@github.com> Co-authored-by: Kevin Heis <heiskr@users.noreply.github.com>
52 lines
2.6 KiB
Markdown
52 lines
2.6 KiB
Markdown
---
|
|
title: Using CAS
|
|
redirect_from:
|
|
- /enterprise/admin/articles/configuring-cas-authentication/
|
|
- /enterprise/admin/articles/about-cas-authentication/
|
|
- /enterprise/admin/user-management/using-cas
|
|
- /enterprise/admin/authentication/using-cas
|
|
intro: 'CAS is a single sign-on (SSO) protocol for multiple web applications. A CAS user account does not take up a {% if currentVersion ver_gt "enterprise-server@2.16" %}user license{% else %}seat{% endif %} until the user signs in.'
|
|
versions:
|
|
enterprise-server: '*'
|
|
type: how_to
|
|
topics:
|
|
- Accounts
|
|
- Authentication
|
|
- Enterprise
|
|
- Identity
|
|
- SSO
|
|
---
|
|
|
|
{% data reusables.enterprise_user_management.built-in-authentication %}
|
|
|
|
### Username considerations with CAS
|
|
|
|
{% data reusables.enterprise_management_console.username_normalization %}
|
|
|
|
{% data reusables.enterprise_management_console.username_normalization_sample %}
|
|
|
|
{% data reusables.enterprise_user_management.two_factor_auth_header %}
|
|
{% data reusables.enterprise_user_management.external_auth_disables_2fa %}
|
|
|
|
### CAS attributes
|
|
|
|
The following attributes are available.
|
|
|
|
| Attribute name | Тип | Description |
|
|
| ------------------ | -------- | ---------------------------------------------------------------- |
|
|
| `имя пользователя` | Required | The {% data variables.product.prodname_ghe_server %} username. |
|
|
|
|
### Configuring CAS
|
|
{% warning %}
|
|
|
|
**Warning:** Before configuring CAS on {% data variables.product.product_location %}, note that users will not be able to use their CAS usernames and passwords to authenticate API requests or Git operations over HTTP/HTTPS. Instead, they will need to [create an access token](/enterprise/{{ currentVersion }}/user/articles/creating-an-access-token-for-command-line-use).
|
|
|
|
{% endwarning %}
|
|
|
|
{% data reusables.enterprise_site_admin_settings.access-settings %}
|
|
{% data reusables.enterprise_site_admin_settings.management-console %}
|
|
{% data reusables.enterprise_management_console.authentication %}
|
|
3. Select **CAS**. 
|
|
4. {% data reusables.enterprise_user_management.built-in-authentication-option %} 
|
|
5. In the **Server URL** field, type the full URL of your CAS server. If your CAS server uses a certificate that can't be validated by {% data variables.product.prodname_ghe_server %}, you can use the `ghe-ssl-ca-certificate-install` command to install it as a trusted certificate.
|