[ovirt-users] ovirt and CAS SSO

I'm trying to add CAS SSO to ovirt. For authn (authentication), org.ovirt.engineextensions.aaa.misc.http.AuthnExtension is OK, I put jboss behind an Apache with mod_auth_cas. Now I'm fighting with authz (authorization). CAS provides everything needed as header. So I don't need ldap or jdbc extensions. Is there anything done about that or do I need to write my own extension ? Is there some documentation about that ?