I have been looking for a SSO system. So far I have found CAS. I wondered if there are any other solutions, and how stable CAS is?
It would be used for the authentication of many different apps in a large school – so it needs to be stable and reliable. It also needs to be able to be integrated with Active Directory and to work with PHP and ASP.
The ADFS 2 sounds like a perfect choice for you. It is a free subsystem implementing the WS-Federation SSO protocol. The protocol itself is a standard from the WS-* family which means that you can easily find toolkits to support authentication in any client technology (.NET, PHP, Java).
Technically, ADFS 2 is a web application running on IIS 7.5/Windows Server 2008 and uses Active Directory as a backend.
http://www.microsoft.com/download/en/details.aspx?id=10909
There are good books on the WS-Federation protocol programming:
Claims Based Identity and Access Control (free ebook)
http://msdn.microsoft.com/en-us/library/ff423674.aspx
Programming Windows Identity Foundation
http://www.amazon.com/Programming-Windows-Identity-Foundation-Dev/dp/0735627185