Delegate idp v4 auth to CAS

[Cantor, Scott]

On 10/9/20, 9:49 AM, "users on behalf of Jehan PROCACCIA" <users-bounces at shibboleth.net on behalf of jehan.procaccia at tem-tsp.eu> wrote:

>    regarding the UI , it's not that easy to cutomize the IDP default one to look like our current one in CAS

I don't really see how that could be possible, is it not HTML?

>    appart from changing logos and messages in  system/messages/messages.properties 

You cannot touch system files. Overrides or new messages are put in the accessible messages/ location, not the system file. They get merged in.

>    is there a documentation regarding login page customization ? 

There's the Velocity documentation, and then the Javadocs of whatever objects you're doing something with and many linked topics such as https://wiki.shibboleth.net/confluence/display/IDP4/VelocityVariables

> is this the right way to reference a link in the login form ? 

Spring message handling is illustrated in all of the existing macros used by the views.

> in that case, does all CAS client apps need to publish metadata and appear as confident relying-parties for the IDP to
> allow SSO ? the "advantage" of a CAS server was that inside the institution there is no need to share metadatas . 

The CAS support doesn't require metadata, there's also the original URL-based registry for clients, and all of that is discussed in the documentation. It's all the things the IdP uses metadata to manage that require use of metadata, not CAS support alone.

CAS client don't know anything about metadata anymore than most of SAML outside of Shibboleth understands metadata. In both cases, it's the IdP operator that has to manage it. I don't (mostly) share metadata inside my institution, I simply manage it because that's the way the IdP works best.

>    that idp.authn.flows = Shibcas should change to idp.authn.flows = External , then I suppose that it is IDP v4 compliant 
> if it uses External flow !? 

There are virtually no V3 extensions of any sort that will run in V4 without some changes. The changes may be major or trivial, usually closer to trivial.

-- Scott