c116efe725
* New Crowdin translations by Github Action * Revert broken translated files to English * Revert broken translations * Revert broken translations * Revert more broket translations * Revert broken translation * Increase Node memory limit for running Jest * Allow Node to use more memory for Jest * Increase Node memory limit for running Jest Co-authored-by: Crowdin Bot <support+bot@crowdin.com> Co-authored-by: Chiedo <chiedo@users.noreply.github.com> Co-authored-by: James M. Greene <JamesMGreene@github.com>
45 lines
2.5 KiB
Markdown
45 lines
2.5 KiB
Markdown
---
|
|
title: Using CAS
|
|
redirect_from:
|
|
- /enterprise/admin/articles/configuring-cas-authentication/
|
|
- /enterprise/admin/articles/about-cas-authentication/
|
|
- /enterprise/admin/user-management/using-cas
|
|
- /enterprise/admin/authentication/using-cas
|
|
intro: 'CAS is a single sign-on (SSO) protocol for multiple web applications. A CAS user account does not take up a {% if currentVersion ver_gt "enterprise-server@2.16" %}user license{% else %}seat{% endif %} until the user signs in.'
|
|
versions:
|
|
enterprise-server: '*'
|
|
---
|
|
|
|
{% data reusables.enterprise_user_management.built-in-authentication %}
|
|
|
|
### Username considerations with CAS
|
|
|
|
{% data reusables.enterprise_management_console.username_normalization %}
|
|
|
|
{% data reusables.enterprise_management_console.username_normalization_sample %}
|
|
|
|
{% data reusables.enterprise_user_management.two_factor_auth_header %}
|
|
{% data reusables.enterprise_user_management.external_auth_disables_2fa %}
|
|
|
|
### CAS attributes
|
|
|
|
The following attributes are available.
|
|
|
|
| Attribute name | Тип | Description |
|
|
| ------------------ | -------- | ---------------------------------------------------------------- |
|
|
| `имя пользователя` | Required | The {% data variables.product.prodname_ghe_server %} username. |
|
|
|
|
### Configuring CAS
|
|
{% warning %}
|
|
|
|
**Warning:** Before configuring CAS on {% data variables.product.product_location %}, note that users will not be able to use their CAS usernames and passwords to authenticate API requests or Git operations over HTTP/HTTPS. Instead, they will need to [create an access token](/enterprise/{{ currentVersion }}/user/articles/creating-an-access-token-for-command-line-use).
|
|
|
|
{% endwarning %}
|
|
|
|
{% data reusables.enterprise_site_admin_settings.access-settings %}
|
|
{% data reusables.enterprise_site_admin_settings.management-console %}
|
|
{% data reusables.enterprise_management_console.authentication %}
|
|
3. Select **CAS**. 
|
|
4. {% data reusables.enterprise_user_management.built-in-authentication-option %} 
|
|
5. In the **Server URL** field, type the full URL of your CAS server. If your CAS server uses a certificate that can't be validated by {% data variables.product.prodname_ghe_server %}, you can use the `ghe-ssl-ca-certificate-install` command to install it as a trusted certificate.
|