Security: CAS and Generic

Owned by Zachary Restifo
Last updated: May 20, 2021
4 min read

Security can be used on YSM sites to restrict access to an entire site or one particular directory, or structure group, of a site.

There are two security options available to use via Tridion without any required set-up in the Profile System: CAS and Generic.

  • Using CAS, the Yale University login system, access can be limited to all NetID's or only certain NetID's, or any combination of those parameters.

  • Alternatively, you can use the Generic security option. This allows you to create a custom username and password that users will need to enter the secured portion of your site.

    • You can create just one custom username and password or multiple possible entries that will grant access, whatever best suits your needs.

In either case, be sure to follow the Applying Security to A Structure Group instructions after creating the CAS or Generic component.

The following instructions provide information on how to use Tridion to create a Security component and apply it to a structure group.

 

Table of Contents

 

Creating a Security: CAS Component

If you want to use CAS to secure your website, the first step is creating a Security: CAS component.

Click New Component (blue) to begin creating a Security: CAS component.

 

In the Building Blocks folder of your respective website, click New Component (highlighted in blue above) in the Create tab (highlighted in yellow above) of the navigation bar.

You will be taken to a new page for creating the component (shown below):

 

Creating a Security: CAS component.

 

  1. Enter an appropriate Name for your component.

  2. Choose Security: CAS from the Schema drop down menu (highlighted in yellow above).

  3. Allow the following groups access: This field allows you to select the type of security and enter the information for who gets access.

    • Choose a Security Type by selecting the radio button next to the option you want.

    • Based on your selection, enter the corresponding Values for who gets access.

      • For example, if you choose NetID for Security Type, enter the NetID(s) that are allowed access in the Values field.

      • You can add, delete, or sort Values with the icons to the left of the field (highlighted in red above).

    • If you will be using multiple Security Types within this single Security component (for example, NetID and External User Security) it is crucial to use the furthest left green + icon (highlighted in green above) to make an additional field for your other values.

Once you've finished inserting your Security Types and coordinating Values, click Save and Close in the Home tab (highlighted in blue above).

 

Creating a Security: Generic Component

If you want to use custom usernames and passwords to secure your website, the first step is creating a Security: Generic component.

Click New Component (blue) to begin creating a Security: Generic component.

 

In the Building Blocks folder of your respective website, click New Component (highlighted in blue above) in the Create tab (highlighted in yellow above) of the navigation bar.

You will be taken to a new page for creating the component (shown below):

 

Creating a Security: Generic component.

 

  1. Enter an appropriate Name for your component.

  2. Choose Security: Generic from the Schema drop down menu (highlighted in yellow above).

  3. Enter a generic username and password: In this section, fill in the Generic Username and Generic Password fields.

    • These fields can contain any username and password of your choosing.

  4. If you would like to allow more than one custom username and password that can access the secured folder, click the green add button (highlighted in green above) to add a second set of fields.

    • You can add as many username and password pairs as you like.

Once you've finished inserting your username(s) and password(s), click Save and Close in the Home tab (highlighted in blue above).

  • The component is ready to be inserted onto a page in your Root folder. See the Applying Security to a Structure Group instructions below.

 

Applying Security to a Structure Group

Once you’ve created either a Security: CAS or Security: Generic component, you are ready to apply that Security to a structure group.

Creating a Security page.

 

  1. Within the Structure Group you would like to secure, create a New Page, and start with the General tab.

  2. The Name of this new page should be "Security."

  3. The File Name must be "security" (lowercase, no spaces).

  4. Below Page Template, uncheck the box next to Inherit from Parent (highlighted in yellow above).

  5. Select XML from the Page Template dropdown (highlighted in blue above).

  6. Click on the Component Presentations tab of your page (highlighted in green above).

  7. In the Component Presentations tab of your page, click Insert.

  8. Your Building Blocks folder will pop up, select the security component you just created.

  9. Select the component template that matches the schema of the component you created (Security: CAS or Security: Generic).

  10. Click Save and Close, then publish the page.