Hi Rob, I would prefer posting here so that other with the same question could also reference what I am about to type :)
Although I don't think I am an expert on the matter, but I do spend my last two months upgrading our system from CAS 4 to CAS 5 to work with SAML 2.0, at this stage I have successfully connect CAS 5 with our SAML 2.0 service and are about to start UAT. I would like to say that although I am being assigned by my supervisor to work on CAS 5 (so I haven't test out the other system that support SAML 2.0 and I don't have particular bias toward using CAS or not), the upgrading process is mostly easy & enjoyable, and this is coming from a fresh graduate with no prior serious java development. For the most part, you are only going to need a few lines of code for the settings, then most of the tedious things like metadata, smal key and saml cert are generated for you (of course if you need you can customize them yourself). As for the most difficult part for me (beside dealing with careless typo and such....) I think is the SAML attributes, which I have trouble passing from my CAS idp to SAML service. However, this problem was solved when I resort to CAS 5.2.0-RC1, so it's great that the dev and the community are still upgrading this framework. However, for the problem: you will need to first understand the CAS framework, which is actually not that easy because there are so many layer behind CAS 5 (Like: Java, Spring, Maven, and all the Spring things...), learning the framework might need some more time than you might think. Maybe you don't need to learn all these if you don't need too extensive customization, but sometime some features will only be used by you and you would need to read the source code to figure out how those works. I would say the documentation is pretty good once you already get into the mindset of CAS, but some features here or there still wouldn't be covered in the doc (which should be less of a problem once 5.2.0 launch since they revamp the way doc is organized). All in all, CAS as an SAML idp is pretty great, definitely is a feasible choice if you can't find a better framework. Cheers! - Andy On Thursday, 17 August 2017 23:53:01 UTC+8, Rob Blais wrote: > > Hi, > > I work for the University of New Hampshire. We're considering options for > SAML Idps and are wondering who is already using CAS as a SAML Idp? If you > are, would you be willing to chat about your experiences with it? > > You can contact me directly or post to the group, as you like. > > Thank you, > /rob > > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/a8a1ee81-0b30-4a38-8d01-46fb35324913%40apereo.org.
