CAS Client/SAML on Shibboleth 3.X

[Marvin Addison]

On Mon, Mar 14, 2016 at 2:59 PM Joel Levin <joel.aaron.levin at gmail.com>
wrote:

> Can CAS clients leverage SAML 1.1.with Shibboleth 3.X (if the CAS
> protocols are not viable for them, and they cannot migrate to SAML2)?
>

The history of SAML support in CAS clients is quite confusing. It started
out as a way to implement attribute release with an eye to full protocol
compliance, but little beyond the attribute release got implemented.
There's no CAS client that supports SAML signature validation, and I have
no idea whether there are additional limitations that would break them.

The good news is that the CAS protocol support in v3 does support the
"CAS-flavored SAML 1.1" support found in many clients. We use that
copiously at my home institution.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160314/b1b3d679/attachment.html>