(biblibre – sponsored by Université Lyoon 3)
Multitier proxy authentication support with CAS 2.0 for SSO. See http://www.jasig.org/cas in general and http://www.ja-sig.org/wiki/display/CAS/Proxy+CAS+Walkthrough specifically.
Koha should be able to accept a proxy ticket, i.e. authenticate with CAS without being directly in contact with the client's browser, e.g. in the case of patron information being requested through a web service by a portal from koha.
Note: simple sso cas support (no proxy) has been done already by biblibre, is in testing and should be released in Koha 3.2