<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><br></div><div><div>I hope this is what you are looking for. Warning I'm a novice so take my input with a grain of salt ...but ...</div><div><br></div><div>Here are some old notes I had from quite a long time ago .... it worked for me. </div><div>Though we did not use it in production as we will now actually switch to using the CAS</div><div>protocol that's part of idp3.x but hopefully it will help. I think the original link I used to help figure out how to do it has been moved.</div><div><br></div><div><br></div><div><br></div><div><ul><li>edit the edit-webapp/WEB-INF/web.xml<br></li><li>add this the context params section (please modify to fit your environment .. obviously you can remove the references to "BRAD" LOL.<br></li></ul></div><div><b><br></b></div><div><i><!-- CAS context params section added by BRAD --></i></div><div><i><!-- For CAS client support --></i></div><div><i><context-param></i></div><div><i> <param-name>serverName</param-name></i></div><div><i> <param-value><b><a href="http://yourcasserver.edu">yourcasserver.edu</a></b></param-value></i></div><div><i></context-param></i></div><div><i><!-- end of CAS context params section added by BRAD --></i></div><div> </div><div><ul><li>add this to the Filter and Mapping section<br></li></ul></div><div><br></div><div><i><!-- CAS Filter and Mappings section added by BRAD --></i></div><div><i><filter></i></div><div><i> <filter-name>CAS Authentication Filter</filter-name></i></div><div><i> <filter-class></i></div><div><i> org.jasig.cas.client.authentication.AuthenticationFilter</i></div><div><i> </filter-class></i></div><div><i> <init-param></i></div><div><i> <param-name>casServerLoginUrl</param-name></i></div><div><i> <param-value>https://<b><a href="http://yourcasserver.edu/">yourcasserver.edu/</a></b>cas/login</param-value></i></div><div><i> </init-param></i></div><div><i></filter></i></div><div><i> </i></div><div><i><filter-mapping></i></div><div><i> <filter-name>CAS Authentication Filter</filter-name></i></div><div><i> <url-pattern>/Authn/RemoteUser</url-pattern></i></div><div><i></filter-mapping></i></div><div><i> </i></div><div><i><filter></i></div><div><i> <filter-name>CAS Validation Filter</filter-name></i></div><div><i> <filter-class></i></div><div><i><b> </b> org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</i></div><div><i> </filter-class></i></div><div><i> <init-param></i></div><div><i> <param-name>casServerUrlPrefix</param-name></i></div><div><i> <param-value>https://<b><a href="http://yourcasserver.edu">yourcasserver.edu</a></b>/cas/</param-value></i></div><div><i> </init-param></i></div><div><i> <init-param></i></div><div><i> <param-name>redirectAfterValidation</param-name></i></div><div><i> <param-value>true</param-value></i></div><div><i> </init-param></i></div><div><i></filter></i></div><div><b><i> </i></b></div><div><i><filter-mapping></i></div><div><i> <filter-name>CAS Validation Filter</filter-name></i></div><div><i> <url-pattern>/Authn/RemoteUser</url-pattern></i></div><div><i></filter-mapping></i></div><div><i> </i></div><div><i><filter></i></div><div><i> <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name></i></div><div><i> <filter-class></i></div><div><i> org.jasig.cas.client.util.HttpServletRequestWrapperFilter</i></div><div><i> </filter-class></i></div><div><i></filter></i></div><div><i> </i></div><div><i><filter-mapping></i></div><div><i> <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name></i></div><div><i> <url-pattern>/Authn/RemoteUser</url-pattern></i></div><div><i></filter-mapping></i></div><div><i><b> </b><b> </b></i></div><div><i><!-- end of CAS Filter and Mappings section added by BRAD --></i></div><div> </div><div> </div><div><b>IMPORTANT</b></div><div><ul><li>Include CAS Client Library in IDP Deployable<br></li><li>Download the a Jasig/apero client jar file .. I would say get the version that matches your CAS server. Since our CAS server is 3.5.2.1 I downloaded a 3.x cas client.jar file (wget <a href="http://central.maven.org/maven2/org/jasig/cas/client/cas-client-core/3.3.3/cas-client-core-3.3.3.jar">http://central.maven.org/maven2/org/jasig/cas/client/cas-client-core/3.3.3/cas-client-core-3.3.3.jar</a>) and place it in /opt/shibboleth-idp/edit-webapp/WEB-INF/lib</li></ul></div><div><ul><li>rebuild the idp.war file<br></li><li>cd /opt/shibboleth-idp/bin<br></li><li>run "build.sh" <br></li><li>stop tomcat or jetty and make user the new idp.war is redployed.</li></ul></div><div><br></div><div><br></div></div><div><br></div><br clear="all"><div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><div></div><div><br></div><div>Brad Mathis</div><div>Principal Systems Analyst</div><div>Pima Community College</div><div>IT - Technical Services</div><div>520.206.4826</div><div><a href="mailto:bmathis@pima.edu" target="_blank">bmathis@pima.edu</a></div></div><div><br></div><div><img src="https://docs.google.com/a/pima.edu/uc?id=0B4QEFWYNTFJATTZySzROc0JISEk&export=download" width="200" height="150"><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div></div></div></div></div></div></div></div></div><br></div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, Sep 24, 2018 at 2:22 PM sherrera <<a href="mailto:sherrera@bradley.edu">sherrera@bradley.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">We are currently running CAS and Shibboleth 2 in production. Shibboleth2 is<br>
configured to use our CAS front end login page for users to authenticate. We<br>
are in the middle of upgrading to Shib 3. We have tested our attribute<br>
releases against testshib and things look to work as expected. What we can<br>
not figure out is how to replicate what we had before with using the CAS<br>
signin page. This is important to use because we are trying to train our<br>
users to not input their credentials into every site that requests them. <br>
<br>
I think I need to use the third-party ticket service but I'm not seeing or<br>
finding how to configure it. Is it still possible to accomplish this with<br>
Shib 3?<br>
<br>
Thanks<br>
<br>
<br>
<br>
--<br>
Sent from: <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html" rel="noreferrer" target="_blank">http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html</a><br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>