IdP v3 -> CAS

[Walter Forbes Hoehn (wassa)]

We at the University of Memphis are using the IdP’s CAS support with INB, SSB, and Luminis. There was an initial incompatibility because the SSOManager software was using a very old version of the Java CAS client that contained an XML parsing bug. We solved this by dropping in a newer CAS client and dependent jars (opensaml, if I remember correctly).  A later update from Ellucian included a newer CAS client and we are now running 100% vanilla with no problems.

Recent version of INB/SSB are supposed to be able to work with SAML, but I haven’t tried it yet myself.  A Luminis roadmap that I saw some months ago showed them adding SAML support to the portal in late 2015, but I’m not sure where that work stands.

-Walter Hoehn


> On Jan 7, 2016, at 3:14 PM, IAM David Bantz <dabantz at alaska.edu> wrote:
> 
> Has anyone deployed Shibb V3 to support Ellucian Banner's use of CAS?
> UA set up CAS long after Shibb to service Ellucian Banner, which seemed to require mods to the CAS distribution.
> So we're under the impression we need to maintain a CAS instance for Ellucian Banner support.
> 
> David Bantz
> UAlaska
> 
> On Thu, Jan 7, 2016 at 12:10 PM, Nate Klingenstein <ndk at internet2.edu> wrote:
> Joel,
> 
> Yes, it means you don't need to run a stand-alone CAS server because it's one of the protocols that the IdP can speak.  You do still need to run CAS clients, of course.
> 
> Take care,
> List.
> 
> 
> On 01/07/2016 01:54 PM, Joel Levin wrote:
>> Hi List.
>> 
>> W.r.t IdP v3 and CAS: https://wiki.shibboleth.net/confluence/display/IDP30/CasProtocolConfiguration
>> 
>> Does this mean that a stand-alone CAS service is no longer required? All our current CAS integrations can migrate to IdP v3 (after we implement)?
>> 
>> Thanks.
>> 
>> 
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net