University of Oregon

Identity Management - Central Web Sign-on

Audience
Faculty/Staff
Researcher
Student
GTF

Common Advantages

  • Eliminates the need for you to manage usernames and passwords for your applications, allowing users to access your application using their centrally managed Duck ID username and password.
  • Provides a common central login service for authentication, rather than having the username and password processed by each application.
  • Allows for single sign-on among applications, allowing the user to move from application to application without having to re-enter a username and password.

CAS

CAS provides proxy authentication by redirecting your application login to our central CAS login service, where the user then authenticates using his or her Duck ID username and password.

Shibboleth

Shibboleth, like CAS, provides authentication by redirecting your application login to our central Shibboleth login service where the user authenticates using his or her Duck ID username and password. Shibboleth also provides single sign-on among other Shibboleth-enabled applications.

Choosing between CAS and Shibboleth

Information Services recommends Shibboleth where possible rather than CAS. Since Shibboleth is the preferred solution for centrally managed services, if you want single sign-on capabilities with these services, you’ll need to use Shibboleth. In addition, even if you don’t think you need some of the Shibboleth specific functionality like attribute delivery now, you’ll be ready to add this in the future if it becomes a requirement.