Supported Protocols
Shibboleth can support both CAS and SAML2 protocols for single sign-on authentication. Which protocol to use will depend on the application requirements of the service provider.
- SAML2 can return more attributes than CAS, but Shibboleth is more complex to set up than CAS.
- CAS can return only the ninernet (uid) attribute which may be sufficient if your service doesn't rely on other attributes, or if you plan to retrieve required attributes using another method (e.g., querying LDAP).