Skip to main content
ExLibris
  • Subscribe by RSS
  • Ex Libris Knowledge Center

    CAS-Based Single Sign-On/Sign-Off

    Translatable
    To configure a CAS integration profile, you must have the following role:
    • General System Administrator
    Alma supports the CAS SSO profile. This enables Alma to exchange authentication and authorization information, allowing a user to sign in or out of an external system and be automatically signed in or out of Alma, or vice versa.
    For a detailed overview of CAS-based SSO, see the Developer Network.
    To add a CAS integration profile:
    1. On the Integration Profiles page (Administration > General Configuration > Configuration Menu > General > External Systems > Integration Profiles), click Add Integration Profile.
      Integration Profile List New UI.png
      Integration Profile List
    2. Enter profile information, specifying CAS as the Integration Type. Click Next.
      CAS Profile Step 1 New UI.png
      Integration Profile General Information Tab
    3. One CAS profile may have the Default CAS profile selected. This is the profile that will be used when the URL does not specify an idpCode. Enter the CAS host URL provided to you by your CAS provider.
      CAS Profile Step 2 New UI.png
      Integration Profile Actions Tab
      For questions on URLs, consult your institution’s support staff.
    Following Alma profile activation and third-party configuration, your Alma login shortcut will be changed by your institution’s support staff the following URL:
    https://<Alma domain>/institution/<institution_name>/CAS
    Upon signing in to Alma, you are redirected to your CAS page to sign in. When sign-in is successful, you are automatically directed back to Alma.
    If your institution requires the ability to authenticate with multiple CAS IdPs, create a CAS integration profile for each IdP. The Alma URL may then be used with a '/CAS/[profile code]' suffix. Alma will use the profile that is identified by the URL. A URL without the profile code in the suffix will use the CAS profile that is marked as the default profile.