<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Times New Roman";
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:14.0pt">Great question!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">We have a fairly simple decision tree that favours SAML via Shib IdP for all vended cloud-services, if the vendor supports it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">A recent wrinkle we have noted is the degree of support for application logout capability that the vendor supports. At this point, we’ve noticed that some vendors have invested more effort in their CAS-based
logout, over a SAML-logout.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">Corey S.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"><o:p> </o:p></span></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="margin-left:-5.4pt;border-collapse:collapse">
<tbody>
<tr>
<td width="92" valign="top" style="width:69.0pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri"><img width="125" height="133" id="_x0000_i1025" src="cid:image001.jpg@01D3C688.2E6E7880" alt="id:image001.jpg@01D337AD.F8BD9400"></span><span style="font-size:14.0pt;font-family:Calibri"><o:p></o:p></span></p>
</td>
<td width="396" valign="top" style="width:297.0pt;padding:0cm 5.4pt 0cm 5.4pt">
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri">Corey Scholefield<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri">Team Lead, Identity Services<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri">University Systems<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri"><a href="http://www.uvic.ca/"><span style="color:#0563C1">University of Victoria</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri">T 250-472-4549<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri">C 250-812-4861<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri">coreys@uvic.ca<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:Calibri">https://www.uvic.ca/systems<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><span style="font-size:16.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black">users <users-bounces@shibboleth.net> on behalf of IAM David Bantz <dabantz@alaska.edu><br>
<b>Reply-To: </b>Shib Users <users@shibboleth.net><br>
<b>Date: </b>Wednesday, March 28, 2018 at 10:57 AM<br>
<b>To: </b>Shib Users <users@shibboleth.net><br>
<b>Subject: </b>Service owner's question CAS or Shibboleth<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">UA service owner for new vended cloud service that supports authN via CAS or Shibboleth (Ad Astra) asks for input on selecting one or the other, as we still run separate CAS (mainly for Banner) and Shibboleth identity services (tied to
same identities in AD). <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Can anyone share a simple list of +/- for responding to this question?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Or know specific reason to implement one or the other for Ad Astra?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">David Bantz<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">UA OIT IAM<o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>