1. What’s New in JA-SIG CAS? JA-SIG Summer Conference Denver, CO June 24 – 27, 2007

2. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Who am I? I’m Scott Battaglia! Application Developer @ Rutgers Java Developer for 5+ Years Lead Developer/Architect on JA-SIG CAS Committer to Acegi Security

3. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? What is CAS? JA-SIG CAS is an enterprise-level single sign on service for the Web

4. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? History CAS 3.1 released with attribute support, single log out, etc. June 2007 Minor revisions to CAS adding more support for Authentication Handlers July 2005 – May 2007 CAS 3.0 released supporting CAS1 and CAS2 protocol while providing pluggable architecture. June 2005 CAS becomes a JA-SIG project.December 2004 Initial CAS 3 talksSeptember 2004

5. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? CAS Deployers Your school goes here.

6. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Libraries/Integration Acegi Security for Spring AuthCAS (Perl Apache module) ‏ PerlCAS phpCAS for Prado (a PHP framework) ‏ for Seraph (a Java security framework) ‏ for uPortal for WebObjects for Zope Java MOD_CAS PAM_CAS ISAPI filter PL/SQL

7. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Agenda Supported Protocols Administrative Features Configuration Architecture Acknowledgements Future Directions Discussion

8. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? 1. Supported Protocols

9. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? CAS 1.0 / CAS 2.0 Continued support for CAS 1.0 / 2.0 Protocol Only way to get proxied authentication

10. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? SAML 1.1 OASIS standard XML-based Communicates –Authentication –Entitlement –Attribute

11. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? OpenID Decentralized framework for user-centric digital identity User name is URI –http://openid.ja-sig.org/battagshttp://openid.ja-sig.org/battags Support “dumb” mode Allows CAS clients -> OpenID clients

12. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? How OpenID Works

13. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Single Log Out Two kinds of sessions –Global CAS Session –Individual Application Sessions CAS 1/2/3 Logout ends global session CAS 3.1 “suggests” that all sessions end

14. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Google Accounts Integration Minimal SAML 2 support Requires Key sharing between Google Accounts Allows Google Accounts to participate in existing SSO solution.

15. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? 2. Administrative Features

16. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Services Management Optional Feature Control what services access CAS. Control what features they have access to.

17. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Services Management

18. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Services Management

19. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Attributes AttributeRepository defines “interesting” attributes Services Management dictates who sees what CAS sends those attributes to services

20. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Pseudo anonymous Support Send a persistent random identifier Only identifies user with respect to service

21. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? 3. Configuration

22. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Authentication Support Added Support for –NTLM –SPNEGO –RADIUS On top of… –LDAP –Database –X.509 –JAAS –File –…

23. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Maven 2 Apache project –Software project management tool –Manage build, reporting document Enforces project structure Encourages modules which means code compartmentalization Dependency management

24. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Ticket Registry BerkeleyDbTicketRegistry –Based on BerkeleyDb –Long Term Ticket Storage JBossCacheTicketRegistry –Distributed DefaultTicketRegistry –Simple, in-memory, single-instance CAS

25. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Updated Views Simpler views Provide user with more active feedback. Easier to customize for institution

26. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? 4. Architecture

27. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Performance Improvements Reduction in arbitrary object creation Removal of unnecessary synchronization Removal of unnecessary reflection usage Options for explicit configuration

28. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Java 5 Required Only runs on Java 1.5 Allows us to take advantage of advances to language: –Generics –java.util.concurrent –Enumerations –Minimize dependencies –JVM performance, garbage collection, etc.

29. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Extension Points Authentication Handlers Non-Interactive Credentials Ticket Registries Attribute Repositories Argument/Protocol Extractors Themes Internationalization

30. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Library Upgrades Upgrades to –Spring WebFlow –Spring Framework –Spring LDAP Leverage new features, bug fixes, and enhancements

31. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Internationalization Leverage Spring’s Internationalization Support Added Chinese, Russian, German, Japanese 11 languages in total!!

32. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Functional Tests Canoo Web Tests –Faster Development/Testing Time –Deployers can test their own instance –Find issues before deployment

33. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? 5. Acknowledgements

34. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Thanks to… Arnaud Lesueur Marvin S. Addison Julien Henry Julien Marchal Andres March Shifei Luo David D. Kilzer Andrew Petro Jan Van der Velpen Marc-Antoine Garrigue Stephen More Shoji Kajita Javier D' Accorso Bart Grebowiec

35. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? 6. Future Directions

36. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Future Directions Additional Protocol Support Internationalization Configuration/Setup Screens Advanced Monitoring Integration with Account Management Systems

37. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? 7. Discussion

38. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? CAS Mailing Lists CAS Community Discussion List –http://tp.its.yale.edu/mailman/listinfo/cashttp://tp.its.yale.edu/mailman/listinfo/cas CAS Developer’s Discussion List –http://tp.its.yale.edu/mailman/listinfo/cas-devhttp://tp.its.yale.edu/mailman/listinfo/cas-dev CAS Announcement List –https://lists.wisc.edu/read/all_forums/subscribe?name=cas- announcehttps://lists.wisc.edu/read/all_forums/subscribe?name=cas- announce Links to archives, etc.: –http://www.ja-sig.org/products/cas/community/lists/http://www.ja-sig.org/products/cas/community/lists/

39. JA-SIG Summer Conference – June 24 – June 27, 2007 What’s New in CAS 3.1? Important Links Product Web Site –http://www.ja-sig.org/products/cas/http://www.ja-sig.org/products/cas/ Wiki –http://www.ja-sig.org/wikihttp://www.ja-sig.org/wiki Issue Tracker –http://www.ja-sig.org/issueshttp://www.ja-sig.org/issues Source Code –http://developer.ja-sig.org/source/http://developer.ja-sig.org/source/

40. Questions?