Skip to main content
  • Subscribe by RSS
  • Ex Libris Knowledge Center

    CAS-Based Single Sign-On/Sign-Off

    To configure a CAS integration profile, you must have the following role:
    • General System Administrator
    Alma supports the CAS SSO profile. This enables Alma to exchange authentication and authorization information, allowing a user to sign in or out of an external system and be automatically signed in or out of Alma, or vice versa.
    For a detailed overview of CAS-based SSO, see the Developer Network.
    To add a CAS integration profile:
    1. On the Integration Profiles page (Configuration Menu > General > External Systems > Integration Profiles), click Add Integration Profile.
      Integration Profile List New UI.png
      Integration Profile List
    2. Enter profile information, specifying CAS as the Integration Type. Click Next.
      CAS Profile Step 1 New UI.png
      Integration Profile General Information Tab
    3. One CAS profile may have the Default CAS profile selected. This is the profile that will be used when the URL does not specify an idpCode. Enter the CAS host URL provided to you by your CAS provider.
      CAS Profile Step 2 New UI.png
      Integration Profile Actions Tab
      For questions on URLs, consult your institution’s support staff.
    Following Alma profile activation and third-party configuration, your Alma login shortcut will be changed by your institution’s support staff to the following URL (see Your Alma Domain Names):
    https://<Alma domain>/CAS
    Upon signing in to Alma, you are redirected to your CAS page to sign in. When sign-in is successful, you are automatically directed back to Alma.
    If your institution requires the ability to authenticate with multiple CAS IdPs, create a CAS integration profile for each IdP. The Alma URL for a profile is /https://<Alma domain>/CAS/[profile code]. Alma uses the profile that is identified by the profile code. Using the URL without the profile code uses the CAS profile marked as the default.