CAS as Remote Authentication Handler in V3

[Corey Scholefield]

Hi there, a follow-up question for this thread :

We are moving to the latest Shib IDP v3.2.1.
We have an external CAS Server, v3.5.2.1.

We are looking at the cas-client-core JAR files to pull in to make the Unicon plugin work.

https://github.com/Unicon/shib-cas-authn3/releases/

Presumably we should be able to make this work with the Unicon plugin v3.0.0 support, as we cannot yet take advantage of the latest v3.1.0 (which requires an external CAS Server v4.x) ?

Thanks!

Corey S.

Corey Scholefield | coreys at uvic.ca<mailto:coreys at uvic.ca>
Sr. Identity Systems Analyst
University of Victoria | Victoria, B.C. Canada



From: users <users-bounces at shibboleth.net> on behalf of Michael Dahlberg <olgamirth at gmail.com>
Reply-To: Shib Users <users at shibboleth.net>
Date: Thursday, February 11, 2016 at 6:54 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: CAS as Remote Authentication Handler in V3

Marvin, Andrew, and Leonard:

Thank you very much!  I appreciate your input.  Also, thank you immensely for the link to Unicon's plugin.  I was not aware of that at all.

Mike

On Wed, Feb 10, 2016 at 4:31 PM, Leonard J. Peirce <leonard.peirce+shibboleth at wmich.edu<mailto:leonard.peirce+shibboleth at wmich.edu>> wrote:
On 16-02-10 03:07 PM, Michael Dahlberg wrote:
We're upgrading our Shib V2 installation to V3 (not actually doing the upgrade, more like a migration).  Our current Remote
Authentication handler is an external CAS server setup according to the directions at
https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration.
This documentation discusses using an external CAS server with IdPv2.  Can these same instructions be used to setup the V3 IdP to
use an external CAS server as a remote authentication handler?


The documentation in the wiki talks about using the internal CAS protocol support with a server-side StorageService implementation.
I believe this is using the IdP as the CAS server.  We'd prefer to keep our existing standalone CAS server.  Given that, is the
optimal method of seting up CAS Remote Authentication using the jar libraries from JASIG?

I'm pretty much in the same boat with a V2 IdP using an external CAS
server and migrating to  a new installation of a V3 IdP that must
(at least in the short term) continue to use an external CAS server.
I'm using the plugin here:

   https://github.com/unicon/shib-cas-authn3

In our test V3 IdP it is working nicely.

- Leonard
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161027/75407758/attachment.html>