OA_20200618_0950_CAS as an identity and access management for Sakai_Kajita_v1
Channel: Apereo Foundation
Date: 10/07/2020

CAS as an identity and access management for Sakai

Session Description:
This session talks about the development of a new CAS authentication handler that enables Sakai local users to be authenticated using CAS, and its usage and experiences since 2012. At Kyoto University, one of the top key national research intuitions in Japan, Sakai has been used for both of regular classes and training courses such as information security, animal experiments and radioisotope handling. During the Sakai pilot project in 2012, it was required to be seamlessly authenticated for both of institution-wide users and Sakai local users through a single login window, not providing two login buttons required to select. To implement this requirement, a new QuerySakaiDatabaseAuthenticationHandler was developed and used it with LdapAuthenticationHandler. And also, during the process of upgrade to CAS 5 from CAS 3 in 2019, the delegated authentication of CAS was enabled to provide SAML2 authentication to integrate with institution-wide Shibboleth SSO. These experiences demonstrate that CAS can be used to expand the identity and access management capability for Sakai. In the session, we would like to discuss about the future plans to enable multi-factor authentication and authorization based on group information.