Overview Many web applications do not need a complete SAML or OpenID Connect implementation. If your organization already uses Apereo CAS, Apache HTTP Server can authenticate users directly against CAS using: The architecture is straightforward: Apache handles the CAS login redirect … [Read more...] about Apache mod_auth_cas: Protect Web Applications with Apereo CAS and Docker
Apache mod_auth_mellon: Configure SAML SSO & Docker
Overview Many modern applications support OpenID Connect natively. Plenty of others do not. You may have an application that: In that situation, Apache can act as the authentication layer in front of the application. The architecture looks like: Apache and mod_auth_mellon act … [Read more...] about Apache mod_auth_mellon: Configure SAML SSO & Docker
Configure OpenID Connect (OIDC) in Apereo CAS 7.3 and 8
Overview Apereo CAS is best known as a Central Authentication Service server, but it can also act as a full OpenID Connect Provider, allowing applications to authenticate users with standard OAuth 2.0 and OpenID Connect flows. A typical deployment looks like this: Once configured, CAS can … [Read more...] about Configure OpenID Connect (OIDC) in Apereo CAS 7.3 and 8
Sponsored Cybersecurity Guest Posts & Technical Contributions
Contribute to Mister PKI Mister PKI works with security professionals, engineers, consultants, and cybersecurity companies to publish high-quality technical content for a focused PKI and security audience. We accept sponsored technical contributions from qualified authors and organizations … [Read more...] about Sponsored Cybersecurity Guest Posts & Technical Contributions
Certificate Ownership Is an Operating Model Problem, Not a Tooling Problem
In December 2018, an expired certificate at Ericsson took mobile data offline for roughly 32 million O2 customers in the UK. In February 2020, Microsoft Teams went down for hours because a certificate lapsed. Both companies had money, talent, and tooling. What they did not have was a specific person … [Read more...] about Certificate Ownership Is an Operating Model Problem, Not a Tooling Problem
Apereo CAS Consulting
Independent consulting for organizations running Apereo CAS. I help organizations troubleshoot, upgrade, integrate, and improve Apereo CAS environments, including SAML, OpenID Connect, OAuth, MFA, Redis ticket registries, service integrations, and production SSO architecture. If you are … [Read more...] about Apereo CAS Consulting
OpenSSL dgst: Create Checksums and Verify Digital Signatures
Overview A software vendor publishes a new application package: along with a SHA-256 checksum. Before installing that package on a server, you want to answer: Is the file I downloaded exactly the same file the vendor published? Later, your own team distributes an internal … [Read more...] about OpenSSL dgst: Create Checksums and Verify Digital Signatures
SSL Certificate Consulting & TLS Troubleshooting
Need help fixing an expired SSL certificate, certificate chain error, hostname mismatch, failed certificate renewal, or other TLS problem? MisterPKI provides hands-on SSL/TLS certificate consulting, PKI troubleshooting, certificate installation, renewal automation, and certificate lifecycle … [Read more...] about SSL Certificate Consulting & TLS Troubleshooting