There is no necessity for using CAS if you are simply implementing
Shibboleth to access Federation resources or if you already have an
existing web based SSO solution in place.
The primary reason why we adopted CAS for our SSO solution was the
number of additional clients that were available to us which fitted what
we were trying to achieve with SSO.
When we were opening the box on Shibboleth, as we did not have any SSO
solution in place we took the opportunity to review what we needed in
addition to replacing the Athens login. Taking the services that our
students needed access to we identified:
OWA - Microsoft Outlook Web Access
VLE - from Desire2Learn
Various services via Banner Self Services - SunGardSCT
(Online Accommdation booking, Online Enrolment, Online Module choices,
Online Results, Online Placements, Online Graduation ticket booking,
Online Update Student Contact Details)
UK Federation resources via Shibboleth.
eResources available via eZproxy.
During our exploration of Shibboleth implementations we found various
references to CAS which included support for these other systems and
rather than re-invent the wheel we decided to adopt CAS as our interim
SSO solution to cover them.
We continue to use CAS, but we are continuing to evaluate other options
as we start to explore a move from SSO to ESSO i.e. having a seamless
signon from desktop through to the browser within our intranet.
I had a page with the original Shib 1.3 instructions with a short
paragraph on the rationale for the NTU specific deployment, I have not
done an updated one for the Shib 2 instructions, I will add this to the
list to do and provide some additional information around why we chose
CAS initially and continue to use it.
> -----Original Message-----
> From: Discussion list for Shibboleth developments
> [mailto:[log in to unmask]] On Behalf Of Jethro R Binks
> Sent: 15 August 2009 17:14
> To: [log in to unmask]
> Subject: Re: Shib and CAS, WAS: Shibboleth deployment example
> on Windows
> On Fri, 14 Aug 2009, Andy Swiffin wrote:
> > In the end I decided it would do nothing for us, and that Shib
> > provided all of the SSO that we needed. The KUSP final report
> > Conclusions concur with this:
> port.pdf :
> Thanks for this and the other comments.
> . . . . . . . . . . . . . . . . . . . . .
> . . . .
> Jethro R Binks
> Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK