Enterprise Single Sign-On for All

View on GitHub

SAML SP Integrations

CAS provides built-in integration support for a number of SAML2 service providers. Configuring these service providers is simply about declaring the relevant properties in the CAS configuration as well as the configuration module below. Each integration, when configured appropriately, will register the service provider with the CAS service registry as a SAML SP and will follow a recipe (that is documented by the SP publicly) to configure attribute release policies, name ids and entity IDs. If you need to, you can review the registration record inside the CAS service registry to adjust options.

NOTE: In the event that special attributes and/or name ids are required for the integration, you are required to ensure all such attributes are properly resolved and are available to the CAS principal.

Remember

SAML2 service provider integrations listed here simply attempt to automate CAS configuration based on known and documented integration guidelines and recipes provided by the service provider owned by the vendor. These recipes can change and break CAS over time and needless to say, they need to be properly and thoroughly tested as the project itself does not have a subscription to each application to test for correctness. YMMV. If you find an issue with an automated integration strategy here, please speak up.

Support is enabled by including the following module in the Overlay:

1
2
3
4
5

<dependency>
     <groupId>org.apereo.cas</groupId>
     <artifactId>cas-server-support-saml-sp-integrations</artifactId>
     <version>${cas.version}</version>
</dependency>

The following SAML SP integrations, as samples, are provided by CAS:

To see the relevant list of CAS properties, please review this guide.

Configure Once, Run Everywhere

If you have developed a recipe for integrating with a SAML service provider, consider contributing that recipe to the project so its configuration can be automated once and for all to use. Let the change become a feature of the project, rather than something you alone have to maintain.

Google Apps

The Google Apps SAML integration is also provided by CAS natively based on this guide.