The Shibboleth SP lets web services use SAML2 to authenticate and do single
sign-on. So if you have configured an Apache server with mod_shib, then you
would use the Apache config files to define a protected area on your web
server, and put your web-based application into that protected area. When
the user tries to access the application, mod_shib will intercept the
request for a protected file, and redirect to the Shib SP, which will in
turn talk to the CAS IdP.

For a simple example with just a dumb PHP script as the "application," see
this link:

https://dacurry-tns.github.io/deploying-apereo-cas/building_samlclient_overview.html


It's for CAS 5.2.x rather than 6.x, but except for a configuration property
name here or there, it should give you the idea.

--

DAVID A. CURRY, CISSP
*DIRECTOR • INFORMATION SECURITY & PRIVACY*
THE NEW SCHOOL • INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 646 909-4728 • [email protected]


On Sun, Jul 12, 2020 at 6:06 PM Vikash Chandra Ansh <
[email protected]> wrote:

> Hi all.
>
> Kindly reply for my query.
>
> Thanks & Regards
> Vikash Chandra
>
> On Sun 12 Jul, 2020, 03:53 Vikash Chandra Ansh, <[email protected]>
> wrote:
>
>> And moreover how cas will know that request will go to SP.
>>
>> I have added a json for the Sp using saml registry class proving SP url
>> and metadata location of SP.
>>
>> PLEASE SUGGEST
>>
>> THANKS AND REGARDS
>> VIKASH CHANDRA
>>
>> On Sun 12 Jul, 2020, 03:50 Vikash Chandra Ansh, <
>> [email protected]> wrote:
>>
>>> Hi all,
>>>
>>> I have successfully configured Shibboleth as SP on Apache server. My cas
>>> will work as IDP.
>>>
>>> Now, I have an application ABC which is integrated with CAS, so now how
>>> request will go via SP through my IDP?And what will be the format of url
>>> when I hit ABC application.
>>>
>>> Previously it used to be like cas url + service+ ABC url and after
>>> submit a service ticket is generated and validated.
>>>
>>> Now after this SAML change how will be my request look like on submit?
>>>
>>> Json for ABC application has been added in cas services folder.
>>>
>>> My cas version is 6.1.2.
>>>
>>> Thanks and regards
>>> Vikash Chandra
>>>
>>>
>>> On Thu 9 Jul, 2020, 21:39 Ray Bon, <[email protected]> wrote:
>>>
>>>> Vikash,
>>>>
>>>> Shib SP is described at
>>>> https://wiki.shibboleth.net/confluence/display/SP3/Home
>>>>
>>>> Ray
>>>>
>>>> On Thu, 2020-07-09 at 16:37 +0530, Vikash Chandra Ansh wrote:
>>>>
>>>> Notice: This message was sent from outside the University of Victoria
>>>> email system. Please be cautious with links and sensitive information.
>>>>
>>>> Hi all,
>>>>
>>>> I have made CAS as idp and added properties for SAML. I am able to
>>>> extract metadata.xml.
>>>>
>>>> Now I want to make shibboleth as SP that need to be configured on
>>>> Apache httpd client 2.4.
>>>>
>>>> Could you suggest how to implement this?
>>>>
>>>> Note:my httpd Apache client is running on https as well.
>>>>
>>>> Thanks and regards
>>>> Vikash Chandra
>>>>
>>>> --
>>>>
>>>> Ray Bon
>>>> Programmer Analyst
>>>> Development Services, University Systems
>>>> 2507218831 | CLE 019 | [email protected]
>>>>
>>>> I respectfully acknowledge that my place of work is located within the
>>>> ancestral, traditional and unceded territory of the Songhees, Esquimalt and
>>>> WSÁNEĆ Nations.
>>>>
>>>> --
>>>> - Website: https://apereo.github.io/cas
>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>> - Contributions: https://goo.gl/mh7qDG
>>>> ---
>>>> You received this message because you are subscribed to the Google
>>>> Groups "CAS Community" group.
>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>> an email to [email protected].
>>>> To view this discussion on the web visit
>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/e454597816d473b162b17f55b96e5619fd13b44e.camel%40uvic.ca
>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/e454597816d473b162b17f55b96e5619fd13b44e.camel%40uvic.ca?utm_medium=email&utm_source=footer>
>>>> .
>>>>
>>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BdrvxjQCbTcqunQbw7nvqTd3X-FAtVQ9CjS1qF3VVAwn0QxCQ%40mail.gmail.com
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BdrvxjQCbTcqunQbw7nvqTd3X-FAtVQ9CjS1qF3VVAwn0QxCQ%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPZWnWCFW3OrHkdov15d6VAR9qnaP4zHOCdqbs7KpWhTA%40mail.gmail.com.

Reply via email to