It really depends on which part of the CAS/Shibboleth duo you currently have in place. If you're already using CAS and need to add Shibboleth, Unicon's module (or using mod_auth_cas in Apache) is the way to go. On the other hand, if you're comfortable with Shib, use that as the "main"
authentication and just use CAS where it is needed. I find CAS much easier to work with, so that's what we use as the main authentication point. Shibboleth is protected by mod_auth_cas and as long as there are no problems, users never see anything mentioning Shibboleth at all. The CAS login/logout pages are the only thing they ever interact with. -- Eric Pierce Identity Management Architect Information Technology University of South Florida (813) 974-8868 -- epie...@usf.edu ________________________________ From: Ben Branch <bbra...@uco.edu> Sent: Monday, May 05, 2014 9:33 AM To: cas-user@lists.jasig.org Subject: [cas-user] CAS + Shibboleth Integration Best Practices All, I currently have about 3 projects that may require us to implement some form of CAS+Shibboleth integration. Our Projects are RemedyForce (SalesForce Platform), Office 365, and Alma (Ex-Libris Voyager replacement). I've been reading the Shibboleth Wiki as well as the CAS+Shibboleth Integration documentation and I'm not sure which direction I should be going. The Shibboleth Wiki has something about "Shibbolizing" a CAS server whereas the JASIG CAS Wiki recommends the Unicon CAS+Shibboleth. I guess my question is, do both of these methods achieve the same goal? And for those of you who have implemented these services with some form of CAS+Shibboleth integration, which method did you use? Ben Branch UNIX/Linux Administrator University of Central Oklahoma ITIL Foundation v3, Network+, RHCSA 100 N. University Drive, Box 122 Edmond, OK 73034 D: 405.974.2649 | M: 405.550.6804 | bbranch@uco.<mailto:bbranch@uco.>edu | www.uco.edu<http://www.uco.edu/> "I am wiser than this man, for neither of us appears to know anything great and good; but he fancies he knows something, although he knows nothing; whereas I, as I do not know anything, so I do not fancy I do. In this trifling particular, then, I appear to be wiser than he, because I do not fancy I know what I do not know." - Socrates **Bronze+Blue=Green** The University of Central Oklahoma is Bronze, Blue, and Green! Please print this e-mail only if absolutely necessary! **CONFIDENTIALITY** -This e-mail (including any attachments) may contain confidential, proprietary and privileged information. Any unauthorized disclosure or use of this information is prohibited. -- You are currently subscribed to cas-user@lists.jasig.org as: epie...@usf.edu To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
