Does a CA has any role in CAS architecture?

[Mehdi Sarmadi]

Hello

  I'm wondering if a Certificate Authority Server has a role in CAS or other
SSO solutions architecture? (In issuing tokens, signing keys, ...)
  This relationship is ambiguous for me.

  Is it essential or best practice to have Certificate Authority Service
inside the architecture or better and enough just to have SSO and SSL
certificates signed by public providers like Verisign?

  looking forward to your replies

TIA
Cheers
-- 
Mehdi Sarmadi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20081118/ff3c53ce/attachment.html