This project is not covered by Drupal’s security advisory policy.

Project abandoned.

This module is still in the early development phase - nothing much to see here yet. If you're not sure what CAS (Central Authentication Service) is, this module probably isn't for you.

This module allows a Drupal instance to restrict registration to those who can successfully authenticate via CAS (as configured by the site admin). Unlike the CAS module, which creates a Drupal user account or logs into an existing Drupal user account when an individual authenticates via CAS, this module does not interface with Drupal's user authentication system. Instead, it sends an invitation via email (in the same manner that the Invite module does) to register on the Drupal site (like normal) to users who successfully authenticate via CAS. In this way, CAS is used as part of the registration process, but not to log in.

Read the README.txt before installing. An external library (phpCAS) and specific PHP modules (curl, openssl, dom, zlib) are required.

Here's what the user registration process looks like with this module:

  1. User navigates to a special path, "cas-register-invite"
  2. User is redirected to external website's CAS auth page
  3. User lands back at Drupal site upon successful CAS auth
  4. Depending on configuration, access may be restricted to a list of uids (CAS usernames) given in admin settings page
  5. Depending on configuration, user may be prompted for an email address or it can be generated by adding an "@domain-name" to the end of the uid
  6. Depending on configuration, validation may check to ensure that email address doesn't have a specific domain associated with it (to prevent users of xyz.edu registering with their name@xyz.edu email address)
  7. Invitation is sent to email address
  8. User clicks on link in invitation and begins normal registration process.

Once a user has registered, he logs in via the normal mechanisms provided by Drupal.

Admins have the ability to require that registration can only occur via invitation (via this alternate process or by a user with the proper permission sending someone an invitation).

This module borrows code heavily from the CAS and Invite modules. I don't see a good way of reusing the code of each module directly to accomplish my goals (outlined in #401518: Login with CAS first time; with Drupal thereafter), but I'm open to suggestions.

Maintainer JD Leonard is available for paid Drupal development work.

Project information

Releases