SSO with CAS or OAuth?

后端 未结 5 1150
一个人的身影
一个人的身影 2020-12-02 03:16

I wonder if I should use the CAS protocol or OAuth + some authentication provider for single sign-on.

Example Scenario:

  1. A User tries to access a protec
5条回答
  •  忘掉有多难
    2020-12-02 03:51

    To me, the real difference between SSO and OAuth is grant, not authentication because a server that implements OAuth obviously has authentication (you have to be logged in to your google, openId or facebook for OAuth to happen with the client app)

    In SSO, a power user/sysadmin grants the final user access to an application beforehand on the "SSO app" In OAuth, final user grants application access to his "data" on the "OAuth app"

    I don't see why OAuth protocol couldn't be used as part of an SSO server. Just take out the grant screen from the flow and let the OAuth server lookup the grant from the backing db.

提交回复
热议问题