by
Luis Rodrigues
5 (2 reviews)
Cassava CAS Server
Cassava provides authentication services based on the Jasig CAS protocol.
Cassava CAS Server ranks #24,585 among WordPress.org plugins with 30+ active installations, is #554 of 1,659 in the Authentication category, a 5/5 rating from 2 reviews, and was last updated Feb 13, 2016. Data from WordPress.org, refreshed twice daily — see methodology.
Tested up to WP 4.4 (Current: 7.1.4)
v1.2.3
Current Version v1.2.3
Updated 10 years ago
Last Update on 13 Feb, 2016
Refreshed 1 week ago
Last Refreshed on
#554 of 1,659 in Authentication
Top 50% by installs
No update in over a year
Rank
#24,585
—
No change
Active Installs
30+
-14.3%
KW Avg Position
60.7
0.4 worse
Downloads
3.2K
+4 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(2 reviews)
Next Milestone 40
30+
40+
3,722
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 5 more installs to reach 40+
Rank Changes
Current
#24,585
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
2 reviews
Overall
100%
5
2
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.2.3
- Last Updated
- Feb 13, 2016
- Requires WP
- 3.9+
- Tested Up To
- 4.4
- PHP Version
- N/A
- Author
- Luis Rodrigues
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 2
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
5M+ installs
#9
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
Loginizer
1M+ installs
#46
All-In-One Security (AIOS) – Security and Firewall
1M+ installs
#57
Maintenance
1M+ installs
#59
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites
700K+ installs
#86
Frequently Asked Questions
Common questions about Cassava CAS Server
The CAS protocol requires three entities to function: the user's web browser, a web application requesting authentication, and a CAS server as implemented by this plugin. When a user accesses an application and attempts to authenticate to it, the application sends the user to the CAS server for validation. The CAS server will look for an active session or else explicitly request the user to insert their credentials. Upon authenticating the user, the CAS server returns the user to the application they came from along with a security ticket. Behind the scenes, the application then contacts the CAS server over a secure connection to independently verify that the security ticket is valid. The CAS server responds with information about the user's status, confirming they are who they claim to be.
Yes. Because applications trade security tickets via HTTP requests, it is very important that this information be encrypted so as not to be easily intercepted. By running a single sign-on service over an unencrypted channel such as plain HTTP, you would be at considerable risk of allowing unauthorized persons into your network.
If you suspect someone may have compromised the integrity of the security tickets generated by the CAS server, you should immediately generate a new set of secret keys and swap them out in WordPress's wp-config.php file.
The plugin requires the PHP DOM extension to generate and read XML data, and the error is likely due to the extension not being installed on the server. While the extension is enabled by default on most setups, some systems require manual activation. It may also have been disabled by a systems administrator. Depending on your operating system, you may be able to install it by running yum install php-dom (RPM) or apt-get install php5-dom (APT). If not, contact your hosting provider or systems administrator to enable it for you.
By default, the plugin provides methods under the wp-cas endpoint. So, if you're configuring a CAS client to authenticate using your server at https://www.my-site.com/, then the full URI should be something like https://www.my-site.com/wp-cas/. The endpoint may be changed at any time by navigating to Settings > Permalinks in the dashboard. Bear in mind that if you change the endpoint you will also need to reconfigure all CAS clients currently using the service.
To return user data along with a validation response, navigate to Settings > Cassava CAS Server and check the attributes you want the server to return. Only versions 2.0 and above of the protocol can disclose user attributes, these options will not change how the earlier CAS 1.0 validation method works. Also note that making user attributes visible does not guarantee the remote application will use them.
At the moment, the only way to change the plugin's behaviour is through the Hooks API. Please refer to the Other Notes page for a list of actions and filters supported by the plugin.
You may peruse the CAS protocol specifications in complete detail at the official project site.
Cassava sets and receives Service Tickets (ST), Proxy-Granting Tickets (PGT), Proxy-Granting Ticket IOUs (PGTIOU) and Proxy Tickets (PT).
