Can subprofiles define their own single-signon system?

[ucdavis]

Can subprofiles define their own single-signon system?

[mrkmiller]

I'm going to assign this to you Shawn since you're more up to speed on Single Sign On.

[eguerin-ucsf]

Is there a Single Sign on Technology that would work for all universities?

[mrkmiller]

Ideally yes, but I have no idea what that would be. For now, I'm more inclined to let each individual subprofile deal with it until something universal could be figured out down the road.

[dearmond]

Most (all?) UCs have a Shibboleth implementation, but we're not using it on our sites at this time because it was too cumbersome to integrate. We have CAS working, and I know that Berkeley also uses CAS.

[dearmond]

YES

I added cas and externalauth as a dependency of the distro, and added sitefarm_auth, our cas module, into the subprofile. It all worked fine, and I see no reason that SAML/Shib/whatever will work fine as well. It's all just more modules.