Central Authentication Service (CAS)

Numerous password prompts and different credentials required for each system have created the need for institutions to adopt a secure single sign-on authentication process. The open source Jasig Central Authentication Service (CAS) creates a secure way for users to access multiple services with a single sign-on. Unicon can help you integrate CAS with a variety of applications including uPortal, Sakai, as well as Apache, Java, PHP, and Perl clients.

Click here for CAS Services from Unicon.

What is CAS?

CAS is an authentication system originally created by Yale University to provide a trusted way for an application to authenticate a user. CAS became a Jasig project in December 2004. CAS provides enterprise single sign on service and is an open and well-documented protocol, an open-source Java server component, a library of clients for Java, .Net, PHP, Perl, Apache, uPortal, and others, integrates with uPortal, BlueSocket, TikiWiki, Mule, Liferay, Moodle and others, offers community documentation and implementation support, and includes an extensive community of adopters.

CAS Overview    Download here

Click here to view the YouTube video, "Jasig Central Authentication Service in 10 Minutes".

What is Single Sign-On?

Single sign-on allows a user to enter his or her name and password once and gain access to multiple applications or systems. Utilizing this authentication process eliminates the need for multiple prompts when the user switches from one application to the next.

Web single sign-on works strictly with applications accessed with a web browser. The request to access a web resource is intercepted either by a component in the web server, or by the application itself. Unauthenticated users are diverted to an authentication service and returned only after a successful authentication.

Why Adopt CAS?

While the most prominent appeal of CAS that is centralizes the user login implementation and experience, there are many other advantages, including these listed below.

• Participating applications do not touch the end user's password, and therefore cannot expose this password if they are compromised
• Offers features for proxy authentication
• Ability to enforce uniform enterprise authentication and authorization policies across the system
• End to end user audit sessions to improve security reporting and auditing
• Removes application developers from having to understand and implement identity security in their applications
• Usually results in significant password help desk cost savings

History of CAS

CAS 1.0 was originally developed by Yale University as an easy-to-use single sign-on for the web, and consisted of servlets and JSP pages. Later, Yale introduced its second version, CAS 2.0 that included proxy authentication and was developed for a large user community. In 2004, CAS became a Jasig project. Together with Yale and Rutgers, Jasig produced the open source CAS 3.0 with the goal of making CAS flexible and extendable to meet the varying requirements of other institutions. Today, CAS has proved itself as a trusted intermediary as universities and colleges worldwide have adopted CAS as their authentication service.

About Jasig

Jasig is a consortium of educational institutions and commercial affiliates sponsoring open source software projects for higher education, fostering collaboration within and among communities of practice. Jasig is a non-profit 501(c)3 membership organization organizing conferences in support of open source software design, development, and implementation. Jasig provides hosting and representation for several open source projects including CAS and uPortal.

Receive the latest news and current events in the CAS and uPortal community. Click here to sign up for the Jasig newsletter.