SAML SP Integrations
CAS provides built-in integration support for a number of SAML2 service providers. Configuring these service providers is about declaring the relevant properties in the CAS configuration as well as the configuration module below. Each integration, when configured appropriately, will register the service provider with the CAS service registry as a SAML SP and will follow a recipe (that is documented by the SP publicly) to configure attribute release policies, name ids and entity IDs. If you need to, you can review the registration record inside the CAS service registry to adjust options.
NOTE: In the event that special attributes and/or name ids are required for the integration, you are required to ensure all such attributes are properly resolved and are available to the CAS principal.
SAML2 service provider integrations listed here attempt to automate CAS configuration based on known and documented integration guidelines and recipes provided by the service provider owned by the vendor. These recipes can change and break CAS over time and needless to say, they need to be properly and thoroughly tested as the project itself does not have a subscription to each application to test for correctness. YMMV. If you find an issue with an automated integration strategy here, please speak up.
Support is enabled by including the following module in the WAR Overlay:
1
2
3
4
5
<dependency>
<groupId>org.apereo.cas</groupId>
<artifactId>cas-server-support-saml-sp-integrations</artifactId>
<version>${cas.version}</version>
</dependency>
1
implementation "org.apereo.cas:cas-server-support-saml-sp-integrations:${project.'cas.version'}"
1
2
3
4
5
6
7
8
9
dependencyManagement {
imports {
mavenBom "org.apereo.cas:cas-server-support-bom:${project.'cas.version'}"
}
}
dependencies {
implementation "org.apereo.cas:cas-server-support-saml-sp-integrations"
}
1
2
3
4
5
6
7
8
9
10
dependencies {
/*
The following platform references should be included automatically and are listed here for reference only.
implementation enforcedPlatform("org.apereo.cas:cas-server-support-bom:${project.'cas.version'}")
implementation platform(org.springframework.boot.gradle.plugin.SpringBootPlugin.BOM_COORDINATES)
*/
implementation "org.apereo.cas:cas-server-support-saml-sp-integrations"
}
The following SAML SP integrations, as samples, are provided by CAS:
If you have developed a recipe for integrating with a SAML service provider, consider contributing that recipe to the project so its configuration can be automated once and for all to use. Let the change become a feature of the project, rather than something you alone have to maintain.
Configuration
Allow CAS to register and enable a number of built-in SAML service provider integrations.
SAML2 service provider integrations listed here attempt to automate CAS configuration based on known and documented integration guidelines and recipes provided by the service provider owned by the vendor. These recipes can change and break CAS over time.
The settings defined for each service provider attempt to automate the creation of SAML service definition and nothing more. If you find the applicable settings lack in certain areas, it is best to fall back onto the native configuration strategy for registering SAML service providers with CAS which would depend on your service registry of choice.
The SAML2 service provider supports the following settings:
Name | Description |
---|---|
metadata |
Location of metadata for the service provider (i.e URL, path, etc) |
name |
The name of the service provider registered in the service registry. |
description |
The description of the service provider registered in the service registry. |
name-id-attribute |
Attribute to use when generating name ids for this service provider. |
name-id-format |
The forced NameID Format identifier (i.e. urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress ). |
attributes |
Attributes to release to the service provider, which may virtually be mapped and renamed. |
signature-location |
Signature location to verify metadata. |
entity-ids |
List of entity ids allowed for this service provider. |
sign-responses |
Indicate whether responses should be signed. Default is true . |
sign-assertions |
Indicate whether assertions should be signed. Default is false . |
The only required setting that would activate the automatic configuration for a service provider is the presence and definition of metadata. All other settings are optional.
The following settings and properties are available from the CAS configuration catalog:
cas.saml-sp.academic-health-plans.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.academic-works.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.adobe-cloud.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.amazon.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.app-dynamics.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.arc-g-i-s.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.arms-software.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.asana.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.benefit-focus.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.black-baud.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.box.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.bynder.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.cccco.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.cher-well.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.concur-solutions.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.confluence.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.cranium-cafe.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.crash-plan.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.docu-sign.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.dropbox.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.easy-iep.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.egnyte.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.emma.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.ever-bridge.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.evernote.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.famis.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.gartner.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.gitlab.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.give-campus.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.in-common.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.infinite-campus.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.jira.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.neo-gov.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.net-partner.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.new-relic.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.office365.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.open-athens.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.pager-duty.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.poll-everywhere.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.qualtrics.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.rocket-chat.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.sa-manage.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.safari-online.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.salesforce.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.sans-sth.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.service-now.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.slack.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.sserca.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.symplicity.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.tableau.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.top-hat.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.warp-wire.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.web-advisor.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.webex.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.workday.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.yuja.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.zendesk.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.zimbra.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|
cas.saml-sp.zoom.metadata=
The location of the metadata for this service provider. Can be a URL or another form of resource.
|