LDAP (or CAS) Auth for Forms

This site is best viewed in a modern browser with JavaScript enabled.

cyberwhite

Yuniar,
I think this feature request was also made recently by orware and seconded by williamansley in another post, but i think this feature deserves its own string...

We've been using MachForm for a number of years now. The one thing we've always wanted is the ability to require LDAP (or CAS) authentication to fill out a form. Also, the ability to pull the user's LDAP attributes into the form data, like name, username, email, etc. This would allow us to verify the form is being filled out by a specific user, that user is part of our organization, and auto-fill user data about that person.

williamansley

I will second this as many times as needed to get this feature added.

ryannix123

I would love to see that as well.

Brix

This would be extremely helpful. Please add it :-)

agdm619

This would be great!

rmsummers

As a large organization using AD this would benefit us greatly.

JCSweatt

I work at a 4-year university, and this functionality would be fantastic, especially with as many students as we have that complete numerous forms for us. Would really cut down on erroneous entries.

NQUAV

Would be great to have, so students can verify that it is them that is filling in the forms and not someone else

orware

CAS Authentication actually isn't too bad to implement and has the following Client available for PHP:
https://github.com/Jasig/phpCAS

Though you may only need small portions of it (in my testing the above client ends up creating it's own PHP session which probably wouldn't be needed by Machform).

Overall the CAS authentication flow is pretty simple (way easier than trying to setup a SAML authentication flow). In Machform it would need some basic settings like the URL to your CAS server to be configured. Then Machform would redirect to the CAS server, the CAS server would respond back to Machform with a redirect containing a Service Ticket in the URL and then the Machform server would have to issue an HTTP request back to the CAS server to validate that one-time ticket. If the validation is successful then the CAS server will respond with a success XML response containing the user's username (and if using the v3 protocol it may also include some extra attributes too). I may help test this out if needed (we're just starting our push towards using CAS more here on campus...currently we have Machforms being used with LDAP which has worked out pretty well).

cyberwhite

Any progress on this? It seem like a feature that many of us would really like.

thedangler

I need this!!!

cyberwhite

Yuniar,
Any progress on CAS authentication for forms? We've moved to a new platform since this feature isn't available, but would consider moving back if it was.

Chris