Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • See LDAP Authentication
  • If you wish to limit use of your app to certain roles and/or campuses, you should retrieve the affiliations of the person associated with the authenticated username, and allow only those matching your criteria to pass through.
You should also look into
Warning
titleCAS recommended as an alternative to LDAP

Consider CAS (the UH Web Login Service) as the preferred and highly recommended alternative to using LDAP for authentication where feasible. Why use CAS?

Security

  • Passwords are hidden from the app; the app does not have to be be responsible for handling passwords securely

Convenience

  • No login for subsequent apps if SSO is allowed

Consistency

  • One official login page for all of UH

Sample Code

...