CAS Service Registry

[Marvin Addison]

>
> What do you mean by one to many?
>

Hopefully an example will clarify:

                <bean
class="net.shibboleth.idp.cas.service.ServiceDefinition"
                      c:regex="https://([A-Za-z0-9_-]+\.)*vt\.edu(:\d+)?/.*"
                      p:group="standard-vt-services"
                      p:authorizedToProxy="false" />

That allows all secure services in the VT DNS namespace to use CAS. That is
the single most common use of the service registry: to restrict SSO to
institutional boundaries.

I was led to understand that the norm in CAS is to apply no controls and
> not register services at


While that may have been true in the past, I'm fairly certain it's more
common these days to restrict at least to institutional boundaries.
<dev-unsubscribe at shibboleth.net>

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20150409/5ed57d99/attachment-0001.html