[cas-dev] CAS Java Clients

[Stephen A. Cochran]

On May 1, 2006, at 1:45 PM, Nathan Kopp wrote:

> I suggest specifically researching the SAML "browser artifact  
> profile."
> It is very similar to the CAS protocol.  I wrote up something a while
> back (probably a year or more ago) about the differences between  
> CAS and
> the SAML browser artifact profile, and what it might take to make CAS
> support that protocol.

Yep, I read through that, lots of similarities. But a chance like  
that would really be CAS protocol V3, or a configurable option to use  
compliant SAML instead of the CAS protocol in response to  
serviceValidate calls (or perhaps samlValidate).


All of these options are good in the long run, but a Scott mentioned,  
doesn't really help in the short run.

I'm going to put all the bits of info I have on clients together for  
the Wiki, and I'll probably throw together a doc explaining the  
design I used to make the clients handle "extended" responses. I  
won't claim that my design is ideal for the long run, but perhaps as  
a temporary solution to save lots of client rewrites.

While I like the suggestion someone had of including a new xml  
namespace, if this is just a temporary solution I'm loath to go  
through that much trouble.

I'll try and have the pages up by tomorrow and then people can start  
commenting and hopefully filling in all the blanks and errors they find.

Steve