Single Sign-on at UNL via CAS

Using CAS at UNL

  1. Sign up for the UNL LDAP users LISTSERV.
    • in the future, we may need to make updates or changes that are not backward compatible
      • we'll make sure that it's announced on LDAP-USERS with plenty of warning
    • we need your involvement and feedback to make UNL Login better
    • as we learn more about CAS, we will develop interface guidelines
  2. Follow the instructions for your programming language below, and give it a try!

CAS is available for all UNL webservers in the unl.edu domain (URL must match *.unl.edu). Any user, on- or off-campus, can authenticate to a CAS-enabled application. Off-campus resources and partners are expected to use federated authentication via Shibboleth and InCommon.

At some point in the future, we may switch to requiring web applications to be registered to use CAS. This change would be announced on the UNL LDAP users list.

Server URL: https://shib.unl.edu/idp/profile/cas

PHP

  1. Download phpCAS from JA-SIG
  2. Use the following configuration to use the UNL CAS server. 
    // initialize phpCAS
phpCAS::client(CAS_VERSION_2_0,'shib.unl.edu',443,'/idp/profile/cas');

Java

The Java CAS client and instructions are available from Apereo.

  • loginUrl = https://shib.unl.edu/idp/profile/cas/login
  • validateUrl = https://shib.unl.edu/idp/profile/cas/serviceValidate

Please share your experience and suggestions with the UNL Web Developer Network.

Other languages

Apereo maintains a large list of CAS clients for various languages.

Please share your experience and suggestions with the UNL Web Developer Network.