Table of contents
What version of CAS are you running?
We support the CAS Protocol via our Identity Provider, Shibboleth version 4.2.1. Shibboleth supports CAS protocol versions 2 and 3 (see below note in the URL section for version 3 support).
Who can authenticate with CAS?
All University of Maryland College Park (UMCP) students, faculty, staff, and affiliates. Additionally employees and affiliates of UMES, UMCES, & USMO can authenticate.
For certain sites, former students and/or associates (guests) can authenticate. Contact the IT Service Desk if you desire this functionality.
What "username" is returned by CAS?
CAS will return the user's Directory ID. Additional attributes are available upon request.
Where can I learn how to use CAS with my web application?
See the CAS web site. In particular, you will want to check out the clients which have already been implemented in a variety of environments/languages.
What are the URLs for the UM CAS server?
See the CAS Protocol specification for details on the parameters.
NOTE: In the v3 specification, CAS lists the serviceValidate for v3 as '/p3/serviceValidate'. In our deployment the same functionality is configured in the '/serviceValidate'
URL above, and the '/p3/serviceValidate URL is not available.
Why does localhost not work for testing CAS with my application?
Due to the AWS Web Application Firewall (WAF), any requests using localhost will be blocked (403 Forbidden). The CAS service parameter needs to use the host localtest.dev.umd.edu which will resolve to the same IP value as localhost.
How can I stay informed?
All users of CAS are strongly encouraged to subscribe to the UMDIRECTORY listserv list by sending a message to listserv@listserv.umd.edu with a body of Subscribe UMDIRECTORY.
What if I have additional questions about CAS?
For additional questions and or assistance, contact the administrators at shibboleth@umd.edu.