Passwordless Authentication in CAS

[Daniel Ellentuck]

Dear CAS implementers,

Columbia University uses CAS for most web logins, along with Duo for MFA. (We run a Shibboleth IdP and a separate OAuth service, but they delegate their logins to CAS.)  At this point, we would like to add a passwordless login option, and we would greatly appreciate hearing from anyone who has implemented this in CAS:

• What was your strategy?
• Did you use the CAS Passwordless Authentication flow?
• What was your general experience, what worked for you, what didn't?
• How was the user experience?
• Anything else you'd like to share.

If you'd rather, please feel free to reply to me directly.

Thanks very much,

Dan Ellentuck

Columbia University I.T.

[Ray Bon]

Dan,

We are beginning to look into this as well. We have a similar set up to you with cas and shib.

Ray

On Fri, 2025-01-24 at 14:13 -0500, Daniel Ellentuck wrote:

You don't often get email from d...@columbia.edu. Learn why this is important