Features
CAS
CAS is a web-based single sign-on protocol that uses the state-wide Microsoft Entra directory system as its authentication and authorization database. After successful authentication, CAS uses SAML to return authorization information, such as affiliation (student, faculty), and identifiers, such as the tnUniqueID, that the application may use to determine whether the user should have access to the service and to match the user to existing accounts within the application.
SHIBBOLETH
Shibboleth is a single sign-on technology that supports both federated access to Internet-based services and access to local applications, using the statewide LDAP directory as its authentication and authorization database. UT is a member of both the InCommon and EduGAIN federations. Shibboleth provides the option to limit access to an application based on defined authorization attributes, such as affiliation or campus. It can also return authorization information to the application using SAML.
LDAP
If an application cannot support CAS or Shibboleth, LDAP-based authentication is available. Note that authorization options may be limited when using LDAP unless the application is configured to retrieve authorization attributes during authentication.
ACTIVE DIRECTORY
Active Directory is a Microsoft-developed directory service used by Windows servers, workstations, and other devices. Active Directory has limited access to authorization information but does provide user-manageable security groups for authorizing access to services.