<?xml version="1.0"?>
<component name="org.nuxeo.ecm.platform.login.Cas2SSO.override">

  <require>org.nuxeo.ecm.platform.login.Cas2SSO</require>

  <documentation>
<pre>
       CAS2 Authentication Plugin
       Parameters include :
        - ticketKey : name of the ticket parameter in the URL
        - appURL : url used to connect to nuxeo when CAS auth is done
          ( can be $NUXEO to let Nuxeo compute the URL)
        - serviceLoginURL : CAS url for login form
          ( can use $CASSERVER to let nuxeo define url according to CasServer header)
        - serviceValidateURL : CAS url for ticket validation
          ( can use $CASSERVER to let nuxeo define url according to CasServer header)
        - serviceKey : name of the service parameter in the URL
     - excludePromptURL : if requested url starts with this value, there will be no CAS authentication
       (you can add multiple exclude path by adding different suffix to the parameter name)
   </pre>

  </documentation>
  <extension point="authenticators" target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService">
      <authenticationPlugin class="org.nuxeo.ecm.platform.ui.web.auth.cas2.Cas2Authenticator" enabled="true" name="CAS2_AUTH">
       <needStartingURLSaving>true</needStartingURLSaving>
       <parameters>
         <parameter name="ticketKey">ticket</parameter>
         <parameter name="ticketKey">proxy</parameter>
         <parameter name="appURL">http://127.0.0.1:8080/nuxeo/nxstartup.faces</parameter>
         <parameter name="serviceLoginURL">http://127.0.0.1:8080/cas/login</parameter>
         <parameter name="serviceValidateURL">http://127.0.0.1:8080/cas/serviceValidate</parameter>
         <parameter name="proxyValidateURL">http://127.0.0.1:8080/cas/proxyValidate</parameter>
         <parameter name="serviceKey">service</parameter>
       </parameters>
      </authenticationPlugin>
  </extension>

</component>
