Central Authentication Service

1
Central Authentication Service
2
CAS What is it?

• CAS is an authentication system originally
  created by Yale University (circa 2000) to
  provide a trusted way for an application to
  authenticate a user. CAS became a JA-SIG project
  in December 2004.
• Currently at 3.2.1 release (Princeton is running
  3.0.7)
• CAS does NOT provide Authorization services

CAS at Princeton
3
CAS Why use it?

• Provides a consistent, secure, authoritative
  means of authentication for web applications
• Developers no longer need to roll their own
  authentication individual sites no longer
  collect passwords
• Robust in production at dozens of universities
  and commercial organizations and maintained by
  active user community (JA-SIG)

CAS at Princeton
4
How CAS works
Web Browser
CAS-enabled application
Central Authentication Service (CAS)
Initial request
Issue redirect to CASw/service ID
Authentication(sends service ID)
Authentication Success! sends service
Ticket(sets TGC)
redirect to web app sends service ticket
validate service ticket
return authenticatednetid
display page toauthenticated user
CAS at Princeton
5
CAS Clients

• Available for many languages
• Java, .NET, PHP, Perl and many others
• Go to
• http//www.ja-sig.org/wiki/display/CASC/Clients

CAS at Princeton
6
Authentication The future

• CAS
• will be maintained for a minimum of three (3)
  years
• Newest server 3.2.x set to go live July 15, 2008
• Support for multiple Authentication sources
  (Active Directory AND Sun LDAP)
• SAML support
• OpenID support
• OIM/OAM is coming
• Oracle Identity Manager/Oracle Access Manager is
  coming
• Authentication AND Authorization

CAS at Princeton
7
CAS The Links

• Clients
• http//www.ja-sig.org/wiki/display/CASC/Clients
• Princeton Implementation / Client examples
• https//sp.princeton.edu/OIT/SDP/CAS
• Technical Docs, Protocol, Support, User group
• http//www.ja-sig.org/products/cas

CAS at Princeton
8
CAS Who is using it?

• In Production
• OIT/EIS
• SDP, DAS, AS
• Outdoor Action
• Firestone library (Apache AuthCAS)
• Outside vendor, CollegeNet
• Coming Soon
• Learn.com
• The Point

CAS at Princeton