Shibbolizing cas server with IdP 3.0

Marvin Addison marvin.addison at gmail.com
Wed Nov 18 15:21:31 EST 2015


>
> Can you give a high level idea how the following flows (can be configured
> to) work with IdP 3.0:
>
>  ·         IdP using CAS for authentication
>
Not possible. CAS is simply another profile in the IdP and authentication
is configured at the IdP.

> ·         CAS using IdP for authentication
>
Simply requires changing URLs in your CAS clients to point to the IdP; for
example, if your IdP is running at https://idp.example.org/idp, then the
Java CAS client configuration might look like the following:

    <context-param>
        <param-name>casServerUrlPrefix</param-name>
        <param-value>https://idp.example.org/idp/profile/cas<param-value>
    </context-param>
    <context-param>
        <param-name>casServerLoginUrl</param-name>
        <param-value>https://idp.example.org/idp/profile/cas/login
<param-value>
    </context-param>

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20151118/72abf797/attachment.html>


More information about the dev mailing list