Hi Markus,

CAS currently only supports SAML 1.1 and OpenID 1.0.  We're working on
adding support for more protocols but it probably won't be done before the
Summer of Code is over ;-)

If you're looking for a higher level Authentication/Authorization framework
you may be interested in Spring Security (if XWiki uses Spring, though you
can get it to work without the actual application being in Spring).  Spring
Security supports CAS, OpenID, and many other methods of authentication and
provides a complete authorization framework.

Check out http://www.acegisecurity.org (Acegi is its old name).  I'm not
currently familiar with anything that supports both SAML 2 and OpenID2 (but
they may be out there.).

Hope that helps.
-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia

On Wed, Jun 11, 2008 at 2:30 PM, Markus Lanthaler <[EMAIL PROTECTED]>
wrote:

> Hello,
>
> I'm a Google Summer of Code Student at XWiki (www.xwiki.org). My task is
> to
> add integration with a higher level authentication/authorisation framework
> to support SAML and OpenID authentication. So I'm currently evaluating
> various frameworks. I got a suggestion to look at CAS and it seems to be
> very interesting.
> So my questions are:
>
>  - Does CAS support OpenID 2.0 authentication (RP)
>  - Can CAS act as a OpenID 2.0 identity provider (OP)
>  - Does CAS support SAML 2.0 authentication (RP)
>  - Can CAS act as a SAML 2.0 identity provider (OP)
>
> I saw that CAS supports SAML and OpenID but I don't know which versions and
> I couldn't find out which scenarios are supported (OP and/or RP?).
>
>
> Best,
> Markus
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to