Agree with Marvin's response.
We use CAS client library here with many applications for SSO. SSL can be a bit tricky if you have Load balancers terminating SSL. I am happy to help and share experiences Regards, Balendran Thavarajah Development Manager, Information Technology | Standards Australia Level 10, 20 Bridge Street Sydney NSW 2000 GPO Box 476 Sydney NSW 2001 P +61 2 9237 6094 | M 0403111111 | F +61 2 9237 6050 | www.standards.org.au Follow us: This email is confidential. If received in error, please delete it from your system. -----Original Message----- From: Marvin S. Addison [mailto:[email protected]] Sent: Friday, 17 May 2013 6:40 AM To: [email protected] Subject: Re: [cas-user] .NET client & SAML > Virginia Tech has a .NET client, and there's also some Windows stuff > in the unsupported client list. Virginia Tech collaborated with Princeton to develop the one and only .NET CAS Client [1]. It's the one you should use. https://wiki.jasig.org/display/CASC/.Net+Cas+Client <https://wiki.jasig.org/display/CASC/.Net+Cas+Client> I think the integration docs are pretty decent, but we're always taking contributions. > Any suggestions on the best client to use for .NET with SAML for > attribute release? The .NET CAS Client works great and we use it exclusively with the SAML protocol here. The only problem we've had is with clock skew on Windows hosts since the .NET client is especially strict on enforcing SAML validity windows and for whatever reason our Windows hosts have a problem getting out of time sync with our stratum 2 time servers. Note the ticketTimeTolerance parameter as a workaround, but it's better to get your clocks in sync. I'm happy to help troubleshoot integration problems with you. Post some logs and we'll go from there. Marvin Addison Middleware Services Virginia Tech [1] Most if not all of the patches (mostly for SAML support) in https://svn.middleware.vt.edu/svn/middleware/cas/cas-clients/dotnet-cas- client/ <https://svn.middleware.vt.edu/svn/middleware/cas/cas-clients/dotnet-cas -client/> got contributed to the official .NET CAS Client. I haven't looked at that source in ages and it's best to assume it's broken. -- You are currently subscribed to [email protected] <mailto:[email protected]> as: [email protected] <mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user <http://www.ja-sig.org/wiki/display/JSG/cas-user> ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com <http://www.symanteccloud.com> ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
