Setting the User Organization

Spring’s default CAS configuration supports only user authentication. However, you can extend this to set organizations in one of two ways:

Mapping to Multiple Organizations

To assign your external CAS users to multiple organizations in JasperReports Server, you need an additional technology like LDAP or JDBC to supply the user’s organization data. We provide sample files that show how to extract the organization data from a third-party technology and integrate it with CAS authentication. These files are described briefly; an in-depth discussion is beyond the scope of this guide.

Setting Multiple Organizations Using LDAP

You can configure your connection to the LDAP server in one of two ways:

The following file gives an example of how to assign users to multiple organizations by integrating CAS with LDAP:

<js-install>/samples/externalAuth-sample-config/sample-applicationContext-externalAuth-CAS-LDAP-mt.xml

This sample uses the ldapExternalTenantProcessor bean to extract an organization hierarchy from the user’s distinguished name. For more information about the ldapExternalTenantProcessor bean, see Mapping to Multiple Organizations in LDAP Authentication.

Setting Multiple Organizations Using JDBC

You can configure your connection to the database in one of two ways:

The following file gives an example of how to assign users to multiple organizations by integrating CAS with a JDBC database:

<js-install>/samples/externalAuth-sample-config/sample-applicationContext-externalAuth-CAS-db-mt.xml

This sample uses the detailsQuery property of the casJDBCUserDetailsService bean to extract tenantId from an external database using an appropriate SQL query. Note that the tenantId column name has to be returned by the SQL query in order for externalTenantSetupProcessor to catch and process it correctly. In cases where the external database column has a different name, cast the column name as tenantId, as in the following example:

SELECT organizationId AS tenantId from org_table

Mapping to a Single Organization

If you have multiple organizations in your deployment, you can use the externalTenantSetupProcessor bean to specify a single organization assigned to all external users. To do this, set externalTenantSetupProcessor’s defaultOrganization property to the organization ID of the selected organization. If an organization with that ID already exists, all external users are assigned to that organization. If the organization does not exist, it's created when the first external user authenticates correctly.

When specifying the defaultOrganization value, the organization ID must not contain the following characters: |, &, *, ?, <, >, /, \, ~, !, #, $, %, ^, [, or ].

The following example shows how to configure externalTenantSetupProcessor to assign all users to organization_1:

<bean id="externalTenantSetupProcessor" class="com.jaspersoft.jasperserver.multipleTenancy.
    security.externalAuth.processors.MTExternalTenantSetupProcessor"     parent="abstractExternalProcessor">
  <property name="multiTenancyService">
    <ref bean="internalMultiTenancyService"/>
  </property>
  <property name="defaultOrganization" value="organization_1"/>
</bean>

Organizations created during external user login have an administrator with the default password. For security reasons, you should change the default password of any organization admin. See Initialization of JasperReports Server for External Users for a process to initialize JasperReports Server, including organization administrators, before going into production with external authentication.