Take the 2-minute tour ×

Please explain what the differences are between Shibboleth and CAS?

share|improve this question
add comment

2 Answers

up vote 10 down vote accepted

The first (Shibboleth) is a server and the second (CAS) a protocol. It makes more sense to compare Central Authentication Service (CAS) with Security Assertion Markup Language (SAML), which is the protocol used by Shibboleth. Both can be used to implement a centralized Single Sign-On (SSO).

share|improve this answer
add comment

Many people use CAS and Shibboleth in conjunction with each other. Look at CAS as an authentication (of the user usually stored in LDAP) and authorization (of the requesting web service) engine. Shibboleth, which is actually two components, the SP (Service Provider) which requests attributes and the IDP (Identity Provider) which broadcasts attributes, is a federating engine which makes the attributes (possibly also stored in the same LDAP) available once the user has been authenticated and the service authorized.

While both can be used to provide SSO, CAS is best at managing the session state (and possible persistence) while Shibboleth is best at parsing and presenting attributes requested by service providers. I've implemented bith CAS and Shibboleth and found the documentation at both the Shibboleth and the Jasig(CAS) wikis to be of great use.

share|improve this answer
add comment

Your Answer


