ARCHIVED: Project: CAS upgrade

Primary UITS contact: Jacob Farmer

Last update: November 6, 2014

Description: Indiana University is deeply invested in the use of Central Authentication Service (CAS) as a core part of IU's authentication, starting from IU's first enterprise focus on Identity Management. The version of CAS deployed at IU continues to serve IU well, but to support IU's growing needs, CAS needs to be modernized. This initiative will add important enhancements that will allow CAS to serve IU for years to come.

Outcome: The project's goals include:

• Upgrading CAS: CAS will be upgraded to version 3.5.
• Adding Login Flow Interruption: Currently, the original OneStart has a widely used interrupt facility for communicating important messages and collecting user information. With the transition to One, this functionality will be moved to CAS.
• Incorporating front-channel authentication via SAML: IU is actively exploring scenarios in which closely aligned partners, such as IU Health, can use their credentials to authenticate to UITS-run enterprise applications. This customization will allow applications to leverage that authentication without significant application changes.

Milestones and status: For the latest announcements and details, see the CAS Regression Information Page.

• Identify professional services partner to assist in development: November 2013 Completed
• CAS 3.5 regression testing: started June 26, 2014 Completed
• Regression testing complete; CAS 3.5 moved to stage: July 24, 2014 Completed
• CAS 3.5 moved to production: November 6, 2014 Completed
• Login Flow Interruption in production: date to be determined
• Front-channel authentication via SAML in production: date to be determined

Comment process: To facilitate communication during the testing period, IMS has created two IU List mailing lists. To be kept informed or provide feedback, use these lists:

• cas-announce-l: This is an announcement-only list that will be used to send periodic updates. To subscribe, send email to cas-announce-l-subscribe@iu.edu.
• cas-discuss-l: This list will be used for discussion during the testing process. To subscribe, send email to cas-discuss-l-subscribe@iu.edu.

Benefits: The upgrade will provide enhanced stability and an expanded portfolio of services on the CAS platform.

Client impact: Applications that consume CAS will be invited to participate in a public regression period during April 2014. More information about that testing will be announced soon.

Project team:

• UITS Identity Management Systems
• Staff from Unicon, Inc.