Discussion:
Can Shibboleth connect to CAS via SAML?
Mike Flynn
2014-09-29 18:56:12 UTC
Permalink
I have a customer that wants to connect to my SP via SAML CAS.  I have never had this request before and looking at their config guide:
CAS Authentication | Columbia University Information Technology

|   |
|   | |   |   |   |   |   |
| CAS Authentication | Columbia University Information Tec...Table of ContentsWhat is CAS?What Can CAS Tell my Application?How Does CAS Work?The CAS ClientCustomizing the CAS Login PageService RegistrationConfi... |
| |
| View on cuit.columbia.edu | Preview by Yahoo |
| |
|   |


It does not look like it will connect to my 2.3.1 Shibboleth implementation - I see nothing about metadata there or anything familiar...
Has anyone done a connection like this before?  If so, any details are appreciated!
Thanks!
Mike
Cantor, Scott
2014-09-29 19:29:51 UTC
Permalink
Post by Mike Flynn
It does not look like it will connect to my 2.3.1 Shibboleth
implementation - I see nothing about metadata there or anything
familiar...
I don't know what they support or don't support, but lack of metadata is
par for the course with most other SAML implementations, it's a manual set
up process like it is for most of us with vendors, just in the other
direction.

-- Scott
--
To unsubscribe from this list send an email to users-unsubscribe-***@public.gmane.org
Michael A Grady
2014-09-30 02:51:04 UTC
Permalink
Post by Cantor, Scott
Post by Mike Flynn
It does not look like it will connect to my 2.3.1 Shibboleth
implementation - I see nothing about metadata there or anything
familiar...
I don't know what they support or don't support, but lack of metadata is
par for the course with most other SAML implementations, it's a manual set
up process like it is for most of us with vendors, just in the other
direction.
CAS has limited support to receive a SAML authn request and respond, crafted originally specifically for Google Apps integration.

https://wiki.jasig.org/pages/viewpage.action?pageId=6063484
(assuming they aren't yet running CAS 4)


--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.
--
To unsubscribe from this list send an email to users-unsubscribe-***@public.gmane.org
Loading...