Cadenza Documentation (v10.2)

Administrator Documentation

    • Welcome
    • Release Notes
      • What’s New in Cadenza 2025 Spring (10.2)
        • What’s New in Cadenza 2024 Autumn (10.1)
        • What’s New in Cadenza 2024 Summer (10.0)
      • Upgrading 10.1 to 10.2
        • Upgrading 10.0 to 10.1
        • Upgrading from 9.4 to 10.0
    • Preparing a Cadenza Installation
      • System Requirements
        • Server Requirements
        • Client Requirements
        • Operating System Requirements
        • Cluster Requirements
        • Reverse Proxy and Load Balancer Requirements
          • Reverse Proxy with Apache
          • Reverse Proxy with HAProxy
          • Reverse Proxy with NGINX
          • Troubleshooting Reverse Proxy Configurations
      • Data Sources
        • Supported Data Sources (Overview)
        • Supported Data Sources (Details)
        • Data Source Templates for Using in Management Center
        • Enabling Access to Data
        • Drivers for Databases
      • Necessary Preparations
        • Overview of the Necessary Preparations
        • Preparation of the Database Schemas
        • Configuring Repository Database Schemas
        • Connection to the configuration database schema
        • Database connection for User Settings
        • Connection to the Job Management Database Schema
        • Configuring Authentication and Authorization
          • About Authentication and Authorization in Cadenza
          • Database connection for Access Management Settings
          • Connection of the User Management System
            • Connection of an LDAP system
            • Configuration of Group Assignment by the LDAP system
            • Connection of an XML user administration for test purposes
            • Configuring SSO in Cadenza
            • Configuration of Authentication, Group Assignment and Transfer of Properties
          • Enabling Anonymous Use
          • Logging of Logins and Changes
          • Further Configurations
        • Creating Cadenza Administrators
        • Cluster Operation: Setting up the Messaging System
    • Installing Cadenza
      • Ways of Installing Cadenza
      • Installation From an Archive File
      • Installation as WAR file
      • Installation as Container / with Docker
      • Installation with Kubernetes and Helm
        • Prerequisites of the deployment
        • Troubleshooting the deployment
    • Configuring Cadenza
      • Managing Cadenza Configuration
        • Configuration Modes
        • Creating and Editing Configuration Settings
        • Overriding Configuration Using Environment Variables or System Properties
        • Exporting Configuration via Logging
      • Basic Configuration
        • Public Base URL
        • Database Connection Pools
        • Caching
        • Logging
        • Disclaimer for External Links
      • Adding Optional Functions
        • Exporting PDF Reports
        • Providing Table Designs
        • Logging Purpose of Request
      • Customizing Standard Functions
        • Limiting the Classes for Classification
      • Configuration Reference
        • Environment Variables, System Properties and Other Runtime Configuration Options
        • Cadenza Variables
        • Secrets in Configuration
        • Repository List
        • Plugins and Their Configurations
        • Configuration Settings
          • accessmanager
          • accessmanagerapikey
          • accessmanagerembedded
          • accessmanagerhttpbasicauth
          • accessmanagerldap
          • accessmanageroauth
          • auditlogging
          • basicweb
          • cache
          • configurationdatabase
          • core
          • databaserepository
          • dataprotection
          • deletiondeadline
          • externallinktemplatesweb
          • geocoder
          • geocoderip
          • gisterm
          • gistermweb
          • jobs
          • locationfinderweb
          • mailclient
          • messagebroker
          • monitoring-publishers
          • openrouteservice
          • postgis
          • purposeofrequest
          • referencingconfiguration
          • repositorydatasourcetemplates
          • repositoryeditattributefunctionweb
          • repositoryweb
          • sdo
          • sdoedit
          • selection
          • selectiondatasourcedatabase
          • selfserviceenrichmentisochrones
          • selfserviceenrichmentmeasuresfromspatialintersection
          • selfserviceimport
          • selfserviceoperationgeocoderip
          • selfserviceoperationgeocoding
          • shapefile
          • shapefileexport
          • shapefileweb
          • sketcheditors
          • subscriptions
          • temporaldataanalysis3d
          • temporaldataanimation
          • timeslideranimation
          • userpreferences
          • userpropertiesfromusername
          • visualizercore
          • wfs
          • what3wordsweb
          • wms
          • workbook
          • workbookreport
          • workbooktable
          • workbookvisualization
    • Branding and Customizing
      • Customizing Help Menu
      • Customizing Styles, Fonts and Graphics
      • Customizing Page Content
      • Customizing Message Properties
      • Customizing Help Tooltips
      • Customizing Help Topics
    • Operating Cadenza
      • Status Endpoint
      • Monitoring with Prometheus
      • Audit Log Schema
    • Securing Cadenza
    • How To
      • Using the Database Migration Tool
      • Configuration of Keycloak for use with Cadenza
      • Group- and property-mapping with JSON web tokens (JWT)
      • Setting a System Property or Environment Variable
      • Working With Message Bundles
      • Controlling the Availability of Certain Cadenza Features
      • How to Use Simple Markup
      • How to Configure Cadenza for Embedding
      • howtos:howto-db-backup-best-practices.adoc
      • Web Analytics Integration
    • Troubleshooting
      • Cluster With TCP Discovery Hangs on Startup in Container
      • Some Requests to Cadenza Fail and a "Same Origin Check" Warning is Logged
      • Slow Startup Times on Older (v4.8 to v5.6) Linux Kernels
      • Preventing Overflow Exceptions When Loading Large Geometries in Oracle
    • Appendix
      • Cadenza and BSI IT-Grundschutz
Administrator Documentation
  • Administrator Documentation
  • Developer Documentation
  • Overview
  • src-cadenza
  • Administrator Documentation
  • Preparing a Cadenza Installation
  • Necessary Preparations
  • Configuring Authentication and Authorization
  • Connection of the User Management System
  • Configuring SSO in Cadenza
Edit this Page

Configuring SSO in Cadenza

You can connect Cadenza to a single sign-on system so that access to Cadenza is possible without explicitly entering access data. Plugins are available for the following procedures:

  • according to SPNEGO with Kerberos

  • via JSON Web Token (JWT) according to the format specified by OAuth 2.0

  • via OpenID Connect (OIDC / Keycloak).

Connection of an XML user administration for test purposes Configuration of Authentication, Group Assignment and Transfer of Properties

This is the disy documentation layout based on the Antora default UI.

The source code for this UI is licensed under the terms of the MPL-2.0 license.