If you want to cut Shibboleth out of the loop and use SAML, you would need to set up your CAS Server as a SAML IdP and integrate directly to CAS.
Another option is to set up your CAS server as an OAuth/OIDC provider. We have integrated a Salesforce instance with OIDC and it has been working well. Travis On Thu, Jul 30, 2020 at 9:24 AM Declan Ballantyne < [email protected]> wrote: > a newbie question. > > Is it possible to connect directly from CAS to Salesforce without having > to go through an IDP. We currently use CAS as our SSO for our suite of > applications. it is a few years old now and when we had to integrate with > Remedyforce (Salesforce) we had to build a bridge using Shibboleth to > enable the two platforms to communicate. > We have moved our platform to Azure and since then, we have not been able > to get the bridge working despite multiple rechecks of confiurations. > Salesforce complains of signature or certificate problems. > "The signature in the response is not valid" > "Is the correct certificate supplied in the keyinfo? false" > > Any ideas very welcome. > > Declan > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/c20be1ad-5a8c-4a06-bb82-e90ab2aeb7f7o%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/c20be1ad-5a8c-4a06-bb82-e90ab2aeb7f7o%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAC_RtEaH5HFTB%2BA7ouygfVUc7x2E17vACJ8aD6EDBVia-pR9Fw%40mail.gmail.com.
