https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9936 --- Comment #5 from David Cook <dcook@prosentient.com.au> --- (In reply to Katrin Fischer from comment #4)

(In reply to David Cook from comment #3)

...

Is this still valid?

Looking at "C4/SIP/ILS/Patron.pm" and it looks like it uses "checkpw()" which looks like it will check LDAP.

I'm not familiar with CAS but it looks like its more SSO rather than directory lookup like LDAP so don't know that it would ever work in this context.

CAS is for authentication, like LDAP or Shibboleth. Some libraries ask for the password at the self checks to avoid abuse of lost cards.

LDAP and Shibboleth/SAML are totally different though. I'm not familiar with CAS, but I imagine it probably works similar to SAML and OIDC in that it requires browser redirection, which needs to happen client-side. LDAP, on the other hand, happens all server-side. So LDAP is easy to do on a SIP server, but you couldn't do SAML/OIDC (and maybe CAS) on the SIP server. Alex and I have been talking about SAML for the self checkout at bug 30444. It gets complicated... -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.