文档介绍：webbrowserapp.#1app.#2app.#3withCASserviceCAS:whydidwechooseit?webbrowserapp.#1app.#2app.#3authentication serverwithoutSSOuser databaseuser Id Id passwordUserauthenticationCAS serverHTTPSwebbrowserUserauthenticationTGC:TicketGrantingCookieUser’spassporttotheCASserverPrivateandprotectedcookie (theonlyoneusedbyCAS,optional)Opaquere-playableticketCAS Id passwordHTTPSuser essinganapplication afterauthenticationwebbrowserCAS serverTGCHTTPSapplicationTGCSTSTSTST:ServiceTicketBrowser’spassporttotheCASclient(application)Opaqueandnonre-playableticketVerylimitedvalidity(afewseconds)essinganapplication afterauthenticationCAS serverHTTPSTGCSTSTSTIDwebbrowserTGCRedirectionsaretransparenttousersapplicationST:ServiceTicketBrowser’spassporttotheCASclient(application)Opaqueandnonre-playableticketVerylimitedvalidity(afewseconds)Accessinganapplication withoutauthenticationwebbrowserCAS essinganapplication withoutauthenticationwebbrowserCAS Id essanapplicationapplicationAuthenticatinguserswithCASCASauthenticationlefttoadministratorsESUP-PortailCASGenericHandlerMixedauthenticationXMLconfigurationLDAP directorydatabaseNIS domainX509 certificatesKerberos domainWindowsNT domainflatfilesCAS serverN-tierinstallationsPGT:ProxyGrantingTicketApplication’spassportforausertotheCASserverOpaqueandre-playableticketwebbrowserCAS serverTGCapplication(CASproxy)STSTserviceIDPGTPGT