cas.authn.wsfedIdp.idp.realm=urn:org:apereo:cas:ws:idp:realm-CAS
cas.authn.wsfedIdp.idp.realmName=CAS
cas.authn.wsfedIdp.sts.subjectNameIdFormat=unspecified
cas.authn.wsfedIdp.sts.encryptTokens=false
cas.authn.wsfedIdp.sts.signingKeystoreFile=file:etc/cas/sts/ststrust.jks
cas.authn.wsfedIdp.sts.signingKeystorePassword=storepass
cas.authn.wsfedIdp.sts.encryptionKeystoreFile=file:etc/cas/sts/stsencrypt.jks
cas.authn.wsfedIdp.sts.encryptionKeystorePassword=storepass
cas.authn.wsfedIdp.sts.realm.keystoreFile=file:etc/cas/sts/stsrealm_a.jks
cas.authn.wsfedIdp.sts.realm.keystorePassword=storepass
cas.authn.wsfedIdp.sts.realm.keystoreAlias=realma
cas.authn.wsfedIdp.sts.realm.keyPassword=storepass
cas.authn.wsfedIdp.sts.realm.issuer=CAS
cas.authn.wsfedIdp.sts.crypto.signing.key=uPrx3XsirSbRMy1EjXGxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
cas.authn.wsfedIdp.sts.crypto.signing.keySize=512
cas.authn.wsfedIdp.sts.crypto.encryption.key=GBztWJMRrQucEVxxxxxxxxxxxxxxxxxxxxxxxxxxxx
cas.authn.wsfedIdp.sts.crypto.encryption.keySize=256
cas.authn.wsfedIdp.sts.crypto.enabled=true
Also when I was adding relying party in CAS I have to set appliesTo to null (i.e I didn't use appliesTo)
Finally, I suggest using Hazelcast for Ticket registry instead of JPA.