Home

What is this project?

This is a project to develop free and open source compatibly licensed extensions for the current-generation CAS server product implementing

• support for authenticating using multiple authentication factors
• support for relying parties (CAS-using applications) understanding how strongly the user authenticated from the ticket validation response, and
• support for relying parties exerting authentication strength requirements.

Project Scope

• Extensions to CAS implementing CAS sever support for understanding how the user authenticated, tracking this in the single sign-on session, communicating it to relying parties, and honoring relying party constraints. A relatively simple but extensible implementation of this.
• Support various way of specifying the required authentication method, via relying-party parameter opt-in, via relying-party configuration inside the CAS configuration and via particular principal attributes.
• A baseline integration with DuoSecurity's 2FA mechanism.