Central Authentication Service Endpoints

RapidIdentity Platform Documentation

Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

RapidIdentity implements the following Central Authentication Service (CAS) endpoints across CAS protocol versions 1.0, 2.0, and 3.0.

Authentication and Logout

EndpointCAS VersionRoleDescription
/login1.0, 2.0, 3.0Credential requestorPresents the login form, authenticates the user, and issues a service ticket to the requesting application.
/login1.0, 2.0, 3.0Credential acceptorAccepts a service ticket from an upstream CAS server and establishes an authenticated session in RapidIdentity.
/logout1.0, 2.0, 3.0EitherTerminates the user's CAS session and propagates the logout to participating services.

Service Ticket Validation

EndpointCAS VersionDescription
/validate1.0Validates a service ticket and returns a plain-text response indicating success or failure. Provided for backward compatibility with CAS 1.0 clients.
/serviceValidate2.0Validates a service ticket and returns an XML response containing the authenticated username and optional attributes.
/p3/serviceValidate3.0Validates a service ticket and returns an XML or JSON response containing the authenticated username and an expanded set of user attributes defined in the CAS 3.0 specification.

Proxy Ticket Validation

Proxy ticket validation supports the CAS proxy (middle-tier) topology, in which RapidIdentity issues proxy tickets to downstream services on behalf of an authenticated user.

EndpointCAS VersionDescription
/proxy2.0Issues a proxy ticket to a registered proxy service, allowing the proxy to authenticate to a downstream service on behalf of the user.
/proxyValidate2.0Validates a proxy ticket and returns an XML response containing the authenticated username, optional attributes, and the chain of proxies through which the ticket was issued.
/p3/proxyValidate3.0Validates a proxy ticket and returns an XML or JSON response containing the authenticated username, the proxy chain, and an expanded set of user attributes defined in the CAS 3.0 specification.