<div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Can you give a high level idea how the following flows (can be configured to) work with IdP 3.0:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> </span><span style="font-size:11pt;font-family:Symbol;color:rgb(31,73,125)">·<span style="font-stretch:normal;font-size:7pt;line-height:normal;font-family:'Times New Roman'">        
</span></span><u></u><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">IdP using CAS for authentication</span></p></div></blockquote><div>Not possible. CAS is simply another profile in the IdP and authentication is configured at the IdP.</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u><u></u></span></p>
<p><u></u><span style="font-size:11.0pt;font-family:Symbol;color:#1f497d"><span>·<span style="font:7.0pt "Times New Roman"">        
</span></span></span><u></u><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">CAS using IdP for authentication</span></p></div></div></blockquote><div>Simply requires changing URLs in your CAS clients to point to the IdP; for example, if your IdP is running at <a href="https://idp.example.org/idp">https://idp.example.org/idp</a>, then the Java CAS client configuration might look like the following:</div><div><br></div><div><div>    <context-param></div><div>        <param-name>casServerUrlPrefix</param-name></div><div>        <param-value><a href="https://idp.example.org/idp/profile/cas">https://idp.example.org/idp/profile/cas</a><param-value></div><div>    </context-param></div><div>    <context-param></div><div>        <param-name>casServerLoginUrl</param-name></div><div>        <param-value><a href="https://idp.example.org/idp/profile/cas/login">https://idp.example.org/idp/profile/cas/login</a><param-value></div><div>    </context-param></div></div><div><br></div><div>M</div><div><br></div></div></div>