Enterprise Single Sign-On for All

View on GitHub

SAML SP Integrations

CAS provides built-in integration support for a number of SAML2 service providers. Configuring these service providers is simply about declaring the relevant properties in the CAS configuration as well as the configuration module below. Each integration, when configured appropriately, will register the service provider with the CAS service registry as a SAML SP and will follow a recipe (that is documented by the SP publicly) to configure attribute release policies, name ids and entity IDs. If you need to, you can review the registration record inside the CAS service registry to adjust options.

NOTE: In the event that special attributes and/or name ids are required for the integration, you are required to ensure all such attributes are properly resolved and are available to the CAS principal.

Support is enabled by including the following module in the Overlay:

1
2
3
4
5

<dependency>
     <groupId>org.apereo.cas</groupId>
     <artifactId>cas-server-support-saml-sp-integrations</artifactId>
     <version>${cas.version}</version>
</dependency>

The following SAML SP integrations are provided by CAS:

To see the relevant list of CAS properties, please review this guide.

Configure Once, Run Everywhere

If you have developed a recipe for integrating with a SAML service provider, consider contributing that recipe to the project so its configuration can be automated once and for all to use. Let the change become a feature of the project, rather than something you alone have to maintain.

Google Apps

The Google Apps SAML integration is also provided by CAS natively based on this guide.