CAS (Central Authentication Service) is an open source single sign-on system that allows a user to log in once and gain access to multiple applications without re-authenticating. It acts as a central authentication system and proxy, allowing web applications to avoid directly handling user passwords. CAS provides authentication handlers for LDAP, Active Directory, Kerberos, and other systems. It also supports single sign-out, returning user attributes, clustering, and integrating with portals and other applications through proxy authentication.

1. Jasig CAS in 10 Minutes Copyright Unicon, Inc., 2009. Some Rights Reserved. This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License. http://creativecommons.org/licenses/by-sa/3.0/us/ Some content drawn from prior presentations at Jasig conferences. Andrew Petro Unicon, Inc. 4 & 5 November, 2009

2. What is CAS? open source single sign on for the Web

3. Multi-Sign-On for the Web

4. At Least with One Username/Password?

5. All Applications Touch Passwords

6. Any Compromise Leaks Primary Credentials

7. Adversary Then Can Run Wild

9. Delete Your Login Forms

10. Webapps No Longer Touch Passwords

11. Adversary Compromises Only Single Apps

13. Webapps No Longer Touch Passwords

16. Password Replay Portal Password-Protected Service Password-Protected Service Password-Protected Service Channel Channel Channel PW PW PW PW PW PW PW PW PW PW PW

21. Questions? Andrew Petro [email_address] www.unicon.net