Added CAS authentication by email address

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 5.1 EE SP4 (5.1.7), 5.2 EE SP3 (5.2.7)
• Fix Version/s: 5.1 EE SP5 (5.1.8), 5.2 EE SP4 (5.2.8)
• Component/s: Application Security
• Labels:
  • 5.2_release_notes
• Environment: All

Currently, CAS authentication only work if the CAS system authenticated users by screen name. This improvement adds CAS authentication by email address. The authentication type used by CAS is determine by the value of property company.security.auth.type in portal(-ext).properties.

UPGRADE NOTE:

This improvement may cause existing CAS authentication to stop working if the following appears in portal(-ext).properties:
company.security.auth.type=emailAddress
or if "How do users authenticate?" in the Control Panel's (Enterprise Admin portlet in 5.1 EE) settings section is set to "By Email Address". These settings were previously ignored when CAS is used. To ensure CAS continues to work correctly, please remove company.security.auth.type from portal(-ext).properties and set "How do users authenticate?" to "By Screen Name".