Overview Many modern applications support OpenID Connect natively. Plenty of others do not. You may have an application that: In that situation, Apache can act as the authentication layer in front of the application. The architecture looks like: Apache and mod_auth_mellon act … [Read more...] about Apache mod_auth_mellon: Configure SAML SSO & Docker
Apereo CAS Office365 SAML
This article will demonstrate how to configure an Apereo CAS Office365 SAML integration. These instructions should be treated as an example and not as a production ready script. These changes should be first made in an Office365 test tenant before attempting in production. Tweak your steps and … [Read more...] about Apereo CAS Office365 SAML
Apereo CAS Access Strategy
This article will demonstrate how to create an Apereo CAS Access Strategy for customized authorization rules to specific registered services. The examples below assume you already have json registered services configured. The accessStrategy will be included in your json service. Access … [Read more...] about Apereo CAS Access Strategy
Apereo CAS Release Multi-Value Attribute
This article will demonstrate how to in Apereo CAS release a multi-value attribute. Each Service Provider (SP) is different in how they parse incoming attributes. Some may accept a comma delimited list and others may require multiple values for the same attribute. By default, attributes such as … [Read more...] about Apereo CAS Release Multi-Value Attribute
Apereo CAS Properties
This article will demonstrate how to in Apereo CAS generate a list of all supported properties. It can be tedious to comb through all of the CAS documentation related to a specific feature. Instead, try creating a list of CAS properties and search the file for properties related to the feature … [Read more...] about Apereo CAS Properties
Apereo CAS usernames
This article will demonstrate how to strip off your domain in Apereo CAS usernames being entered for authentication. Often users will be accustomed to entering an email address to sign in, but if your CAS instance requires just the username, then the log in will fail. If the email address is always … [Read more...] about Apereo CAS usernames
Apereo CAS Custom Metadata Resolver
This article will demonstrate how to create an Apereo CAS Custom Metadata Resolver for individual services in your json service registry. In the event that you need to troubleshoot the resolution of a service providers metadata, you can quickly swap the default CAS resolver with a groovy resolver … [Read more...] about Apereo CAS Custom Metadata Resolver
Multiple ACS urls
In our experience, service providers (SP) generally use one ACS URL as opposed to multiple ACS URLs in their saml metadata. We should also note that for intents and purposes in this article when we refer to saml we are referring to SAML 2.0. This article will also shorten the term Assertion Consumer … [Read more...] about Multiple ACS urls