some fundamental question

[Scott Battaglia]

On Wed, Aug 13, 2008 at 9:39 PM, wely ylew <ylew15 at yahoo.com> wrote:

> Dear all,
>
>     I am new at this mailing list. First of all, thanks for giving me an
> opportunity to join.
>
>     I need to implement Shibboleth system for authentication purpose.
>
>     Honestly, I am a newbie at CAS and Shibboleth. As a newbie, I have done
> my homework that I have explore the following links:
> - http://www.ja-sig.org/products/cas/index.html
> - http://en.wikipedia.org/wiki/Central_Authentication_Service
> - http://en.wikipedia.org/wiki/Shibboleth
> - http://shibboleth.internet2.edu/
>
>     From there, I learn some important points as I resume here:
> - CAS is a single-sign-on protocol for web. It enables us to sign only
> once, but we can access others application / web as long as they have
> registered with CAS (right)? [Please correct me, if I have some mistaken or
> miscenception]
>

CAS is a single sign on protocol as well as a proxying protocol (i.e. an
application can access another application on behalf of the user).
Applications don't need to "register" with CAS, just understand the protocol
(though the latest CAS servers include ways for local deployers to place
restrictions).


>
>
>     However, somehow the explanation is too confusing. For example, I still
> could not get the idea what is the relationship between CAS and Sibbholeth.
> Could somebody explain it to me by simple and comprehensive explanation?
>

CAS enables local single sign on, etc.  Shibboleth is interested in the
Federation problem (i.e. when dealing with local users isn't enough).  In
general you can use both of them together.  People tend to protect their own
Shibboleth instances with CAS (by Shibboleth acting as just another CAS
client).

-Scott


>
>
>     Many thanks!
>
>
> Regards,
>
> Wely
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080814/9f685c90/attachment.html