A cooperating back-end service, like a database or mail server, can participate in CAS, validating the authenticity of users via information it receives from web applications. CAS then gives the application trusted information about whether a particular user has successfully authenticated.ĬAS allows multi-tier authentication via proxy address.

The application then validates the ticket by contacting CAS over a secure connection and providing its own service identifier and the ticket. If the authentication succeeds, CAS returns the client to the application, passing along a service ticket. CAS validates the client's authenticity, usually by checking a username and password against a database (such as Kerberos, LDAP or Active Directory). When the client visits an application requiring authentication, the application redirects it to CAS.

It may also involve a back-end service, such as a database server, that does not have its own HTTP interface but communicates with a web application. The CAS protocol involves at least three parties: a client web browser, the web application requesting authentication, and the CAS server. The name CAS also refers to a software package that implements this protocol. It also allows web applications to authenticate users without gaining access to a user's security credentials, such as a password. Its purpose is to permit a user to access multiple applications while providing their credentials (such as user ID and password) only once. The Central Authentication Service ( CAS) is a single sign-on protocol for the web. JSTOR ( March 2023) ( Learn how and when to remove this template message).Unsourced material may be challenged and removed.įind sources: 'Central Authentication Service' – news Please help improve this article by adding citations to reliable sources. This article needs additional citations for verification.

Login microsoft authenticator