Connect the Service to Joint Web Login with CAS

Guide to connect service to Joint Web Login with CAS.

This procedure describes how to connect your service to Joint Web Login with CAS as a customer or supplier. Connecting your service with CAS means that you can find out the username of the user visiting the service.

If your service needs access to more information than just the username, you must connect the service with SAML 2.0.
See Checklist for Joint Web Login service (SAML 2.0).

Important information about CAS

  • Obtaining additional attributes from CAS beyond the username is not supported (allowed).
  • All authorization (authorization management) and role management must be done in your service. Joint Web Login does not perform any authorization management or role management for the service.

To connect a service to Joint Web Login with CAS, you need to:

  1. Step 1

    Determine which technical solution should be used for the protection, e.g.:

     

    Technical Solution

    Module / Link

    Example

    Apache web server

    mod_auth_cas

    Example Configuration for Apache

    PHP application

    phpCAS


    Java application

    Java Apereo CAS Client


    .NET application

    Apereo .NET CAS Client


    Proprietary CAS integration

    Information for Proprietary CAS Integrations

    		 
  1. Step 2

    Determine the extent to which the service should be protected by login, e.g.:
    - the whole website for the service should be protected, i.e. login is always required when visiting the service.
    - a specific directory should be protected because the service/application is installed there, and the rest of the website should be unprotected.
  2. Step 3

    Find out the service name (URL) of the service.
    This information should be provided by the service provider. If the service name of the service to be protected is not under the uu.se domain (e.g. if the service name is myservice.se), contact IT support with a request to use CAS with this service name.
  3. Step 4

    Install and configure the CAS protection.
    See the table in point 1 for more information.
  4. Step 5

    Test the CAS protection.

General Information About CAS

URLs to CAS v2:

Event


URL

Login

https://weblogin.uu.se/idp/profile/cas/login

Ticket validation

https://weblogin.uu.se/idp/profile/cas/serviceValidate

Logout*

https://weblogin.uu.se/idp/profile/Logout

*) from Joint Web Login and thereby also from CAS.

Contact

Last modified: