Single Sign-On (SSO): once authenticated to CAS, there is no need to further provide credentials to access both Jenkins and Kanboard The demo is currently set for simple form-based authentication but can be easily enhanced to allow OAuth 2.0 or SAML 2.0
Centralized user management: users are created and managed in Apache Syncope; as immediate result, they can be used for accessing Jenkins and Kanboard.
When administrators disable users in Syncope, they are instantly forbidden to
authenticate
Group-based provisioning: all users managed in Apache Syncope are by default enabled to Jenkins; moreover, two groups are defined (Kanboard Users and Kanboard Managers): the former will enable Kanboard, the latter will further grant administration rights
Apache Syncope is able to natively deal with a wide range of technologies: here a relational database as
PostgreSQL and an LDAP Directory Server as OpenLDAP are configured as reference.