Skip to content

Gluu Casa Quick Start Guide#

Overview#

Gluu Casa is a self-service web portal for end-users to manage security preferences for their account in a Gluu Server. Follow this guide to install and configure a deployment of Casa.

Prerequisites#

Casa can be installed on a VM with a pre-existing Gluu Server installation, or a new instance of the Gluu Server can be installed during Casa deployment.

The server or VM should have at least the following minimum specs:

CPU Unit RAM Disk Space Processor Type
2 5 GB 40 GB 64 Bit

The following operating systems are supported:

  • Ubuntu 16/18
  • CentOS 7
  • RHEL 7
  • Debian 9

Getting started#

Install packages#

Casa requires an operational Gluu Server with a matching version number (e.g. Casa 4.0 and Gluu 4.0). In addition, Casa should be installed on the same server or virtual machine as the Gluu Server.

If you don't already have the Gluu Server installed, it will be automatically installed with Casa.

Do not run setup_casa.py at this time.

Set up Gluu Server#

If the Gluu Server was installed in the previous step, follow these instructions to start the server and run the setup script.

Otherwise, skip this step.

Make sure the Gluu Server has at least the following components:

  • oxAuth OAuth2 Server
  • oxTrust admin GUI
  • Gluu LDAP
  • Apache Web Server

Set up Casa#

Once the Gluu Server is installed, run the Casa setup script.

The oxd client software is a required component to integrate Casa with the Gluu Server. It will be automatically installed with the script. When prompted, select no to install oxd.

Configure Casa#

Configuring Casa for usage requires you to enable interception scripts in the Gluu Server, activate the authentication methods in Casa, and install and configure the 2FA settings plugin.

  1. Interception Scripts in Gluu: Enable authentication interception scripts in the Gluu Server. Log in to oxTrust as an administrator and enable the desired 2FA credentials to be managed with Casa.

  2. Activate authentication methods in Casa: Once the interception scripts have been enabled, they can be activated in Casa itself. Log in to Casa as an administrator and enable the desired methods.

  3. Setup 2FA preferences: Use the 2FA Settings plugin to set the minimum number of credentials a user must enroll.

Test enrollment and 2FA#

  1. Enroll at least two credentials on a non-administrator user.

  2. Turn on 2FA for the account.

  3. Test 2FA Authentication by logging off and logging back in. Application access should now require a second authentication factor.

Finish configuration#

Once satisfied with testing, configure the Gluu Server to log in users via Casa for all applications the server protects.

Check out available plugins#

Browse our catalog of plugins to add features and expand Casa!