<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><blockquote type="cite">On Dec 11, 2013, at 9:24 AM, "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><blockquote type="cite">On 12/11/13, 12:57 AM, "Abba Yadav" <<a href="mailto:APY@usp.org">APY@usp.org</a>> wrote:<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">We have an integrated Shibboleth and CAS installation using<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">shib-cas-authenticator. Is it possible to retrieve within CAS the<br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite">original service URL that is protected by Shibboleth?<br></blockquote></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">No, SAML does not communicate that information by design. What you get is<br></blockquote><blockquote type="cite">an entityID. What you get in CAS is outside of my view, but you will never<br></blockquote><blockquote type="cite">get the URL.<br></blockquote><div><br></div>And that entityID for the requesting service is *not* communicated back to CAS today when using the shib-cas-authenticator. Unicon is planning to produce a new version of that within the next few months that "enriches" the communication between the Shibboleth Identity Provider and the CAS Server. So that the CAS Server does know the service (entityID) that sent the user to the Identity Provider, and the requested authentication context, and so that the Identity Provider gets back more info about the authentication that is done by the CAS Server.<br><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br>--<br>Michael A. Grady<br>Senior IAM Consultant, Unicon, Inc.</div></div></span></div></span></span>
</div>
<br></body></html>