--- shibboleth-identity-provider-3.2.0/webapp/WEB-INF/web.xml.orig	2015-11-18 00:00:42.000000000 -0800
+++ shibboleth-identity-provider-3.2.0/webapp/WEB-INF/web.xml	2015-12-03 11:09:46.000000000 -0800
@@ -21,6 +21,61 @@
         <param-value>net.shibboleth.idp.spring.IdPPropertiesApplicationContextInitializer</param-value>

     </context-param>

 

+    <!-- For CAS client support -->
+    <context-param>
+      <param-name>serverName</param-name>
+      <param-value>login.oregonstate.edu</param-value>
+    </context-param>
+
+    <!-- CAS client filters -->
+    <filter>
+      <filter-name>CAS Authentication Filter</filter-name>
+      <filter-class>
+          org.jasig.cas.client.authentication.AuthenticationFilter
+      </filter-class>
+      <init-param>
+        <param-name>casServerLoginUrl</param-name>
+        <param-value>https://login.oregonstate.edu/cas/login</param-value>
+      </init-param>
+    </filter>
+ 
+    <filter-mapping>
+      <filter-name>CAS Authentication Filter</filter-name>
+      <url-pattern>/Authn/RemoteUser</url-pattern>
+    </filter-mapping>
+  
+    <filter>
+      <filter-name>CAS Validation Filter</filter-name>
+      <filter-class>
+        org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
+      </filter-class>
+      <init-param>
+        <param-name>casServerUrlPrefix</param-name>
+        <param-value>https://login.oregonstate.edu/cas/</param-value>
+      </init-param>
+      <init-param>
+        <param-name>redirectAfterValidation</param-name>
+        <param-value>true</param-value>
+      </init-param>
+    </filter>
+  
+    <filter-mapping>
+      <filter-name>CAS Validation Filter</filter-name>
+      <url-pattern>/Authn/RemoteUser</url-pattern>
+    </filter-mapping>
+  
+    <filter>
+      <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
+      <filter-class>
+        org.jasig.cas.client.util.HttpServletRequestWrapperFilter
+      </filter-class>
+    </filter>
+  
+    <filter-mapping>
+      <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
+      <url-pattern>/Authn/RemoteUser</url-pattern>
+    </filter-mapping>
+
     <!-- Spring listener used to load up the configuration -->

     <listener>

         <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>