We support the CAS Protocol via our Identity Provider, Shibboleth version 4.2.1. Shibboleth supports CAS protocol versions 2 and 3 (see below note in the URL section for version 3 support).
All University of Maryland College Park (UMCP) students, faculty, staff, and affiliates. Additionally employees and affiliates of UMES, UMCES, & USMO can authenticate.
For certain sites, former students and/or associates (guests) can authenticate. Contact the IT Service Desk if you desire this functionality.
CAS will return the user's Directory ID. Additional attributes are available upon request.
See the CAS web site. In particular, you will want to check out the clients which have already been implemented in a variety of environments/languages.
See the CAS Protocol specification for details on the parameters.
NOTE: In the v3 specification, CAS lists the serviceValidate for v3 as '/p3/serviceValidate'. In our deployment the same functionality is configured in the '/serviceValidate'
URL above, and the '/p3/serviceValidate URL is not available.
Due to the AWS Web Application Firewall (WAF), any requests using localhost will be blocked (403 Forbidden). The CAS service parameter needs to use the host localtest.dev.umd.edu which will resolve to the same IP value as localhost.
All users of CAS are strongly encouraged to subscribe to the UMDIRECTORY listserv list by sending a message to listserv@listserv.umd.edu with a body of Subscribe UMDIRECTORY.
For additional questions and or assistance, contact the administrators at shibboleth@umd.edu.