Contributors: vaurdan, jpargana, ricardobaeta Donate link: https://dsi.tecnico.ulisboa.pt Tags: cas, maestro, central, centralized, authentication, auth, service, system, server, phpCAS, integration, ldap Requires at least: 3.5 Tested up to: 3.9.1 Stable tag: 1.1.2 License: GPLv2 or later License URI: http://www.gnu.org/licenses/gpl-2.0.html
CAS Maestro allows you to configure your centralized authentication service, CAS, for an integrated log in with WordPress. LDAP is optional.
If you have a CAS service and you want to authenticate your users in WordPress with the same credentials, you can use this plugin to get the job done.
The users that attempt to start their sessions in WordPress, will be redirected to the CAS single sign-on page, where their sessions starts. If the user data is valid, they are redirected back to WordPress. If the credentials already exist in your WordPress the user will be authenticated. Otherwise, if the user was pre-registered in the configuration page, the user will be created.
CAS Maestro can also connect to a LDAP server to access personal data to be used in user profile.
Features included:
- Full integration with the WordPress authentication system
- One of the most secure CAS plugins for WordPress
- Possibility to pre-register some known users, with the desired role
- LDAP integration for user data fill, such as name and e-mail
- Validation mechanisms to avoid getting blocked in case of misconfiguration
- Mail notification for pre-registered users
- Network activation allowed (todo: network panel for configuration)
- Install Cas Maestro either via the WordPress.org plugin directory, or by uploading the files to your server (
/wp-content/plugins/) - Activation can be made in 'Plugins' menu
- Configure carefully Cas Maestro through plugin's page
ATTENTION If for some reason you are unable to access the administrator panel, you can disable the CAS Maestro behavior by adding the code line define('WPCAS_BYPASS',true); to wp-config.php file. That way you can configure CAS Maestro before revert the previous instruction.
Did you know... If you leave empty fields in CAS Maestro configuration, the plugin will ask you to fill fields before final activation. Therefore you can use WordPress login system before the configuration conclusion.
You can customize the registration logic by overriding the plugin's process_login and process_logout methods by adding functions with identical names in functions.php
= In case that I cannot access the content manager due to a misconfiguration of this plugin, what steps should I perform? =
You can bypass the CAS Authentication logging-in on http://www.example.com/wp-login.php?wp. This will allow you to login using your WordPress account.
Beside that, you can temporary disable the WordPress behavior doing the following:
- Edit the file wp-config.php and search for
define('WP_DEBUG', false)su; definition - Before that definition, write
define('WPCAS_BYPASS',true); - Reconfigure the plugin and remove the line that was added.
Alternatively, you may simply uninstall CAS Maestro as follows:
- Remove the directory of plugin CAS Maestro
- Perform access according to the login WordPess
- Reinstall CAS Maestro
= It is possible to login using WordPress accounts? =
Yes. But the login URL is slighty different: you must login over /wp-login.php?wp URL. This will give access to the standard WordPress login form so you can use both authentication methods.
- The full CAS Maestro settings page
- CAS Server settings
- Mailing options
= 1.1.2 =
- Fixed bug with wrong type of the CAS Server version
= 1.1.1 =
- CAS Server Path is no longer a mandatory field
= 1.1 =
- Bypass to the CAS authentication implemented using a query parameter
- Minor bug fixes
= 1.0.4 =
- phpCAS deprecated functions replaced
= 1.0.3 =
- Minor bug fixes
= 1.0.2 =
- Fixed php short tag bug
- Fixed 'Undefined index' notices (thanks zacwaz)
= 1.0.1 =
- Bug fix with includes, ready for WordPress 3.9
= 1.0 =
- Initial release.
New version with CAS Auth bypass