Groups

CAS Community

1–30 of 5318

Welcome to the CAS community mailing list. Please take a look at the following resources to better understand support options:

Support: https://apereo.github.io/cas/Support.html
Documentation: https://apereo.github.io/cas
Blog: https://apereo.github.io/
Contributor Guidelines: https://apereo.github.io/cas/developer/Contributor-Guidelines.html

CAS is an open-source Apache v2 project under the sponsorship of the Apereo Foundation. Please review the Apereo Welcoming Policy for more info: https://www.apereo.org/content/apereo-welcoming-policy

Thank you.

0 selected

Akash Mohapatra

4:38 PM

CAS 7.1.3 bootrun is failing since morning OCT 1

Hello All, we see the Apereo CAS 7.1.3 has been getting stuck with below stacktrace since the morning

unread,

CAS 7.1.3 bootrun is failing since morning OCT 1

Hello All, we see the Apereo CAS 7.1.3 has been getting stuck with below stacktrace since the morning

4:38 PM

Baron Fujimoto, … Ray Bon3

Oct 1

Multiple Instances of Duo MFA clarifications?

Baron, To get a list of all properties run: ./gradlew exportConfigMetadata Produces file config-

unread,

Multiple Instances of Duo MFA clarifications?

Baron, To get a list of all properties run: ./gradlew exportConfigMetadata Produces file config-

Oct 1

Sep 30

CAS 7.2.5, why this condition is Not met, entries exist in application.properties

Never mind, I did not correctly specify the location of the JSON file. Yan On Tuesday, September 30,

unread,

CAS 7.2.5, why this condition is Not met, entries exist in application.properties

Never mind, I did not correctly specify the location of the JSON file. Yan On Tuesday, September 30,

Sep 30

Frédéric Dussurget

Sep 30

DELETE operation via RESTful service Registry in 7.3.x does not work anymore

Hi, context : CAS 7.3.0-RC3, Redis for all (including registry) The following DELETE operation on any

unread,

DELETE operation via RESTful service Registry in 7.3.x does not work anymore

Hi, context : CAS 7.3.0-RC3, Redis for all (including registry) The following DELETE operation on any

Sep 30

Sep 29

Re: SAML2 as idp no longer working after migrating from 6.6.7 to 7.2.6

entityID is just a string of characters [that should be at least globally unique]. The cas serviceId

unread,

Re: SAML2 as idp no longer working after migrating from 6.6.7 to 7.2.6

entityID is just a string of characters [that should be at least globally unique]. The cas serviceId

Sep 29

Sep 29

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/09/25/oauth-oidc-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/09/25/oauth-oidc-vuln/

Sep 29

Sep 27

Re: [apereo-info] Urgent Support Needed for Uninstalling from Chrome on Mac

Dear Alice, Thank you for reaching out. I'd like to clarify that the Apereo Foundation is not a

unread,

Re: [apereo-info] Urgent Support Needed for Uninstalling from Chrome on Mac

Dear Alice, Thank you for reaching out. I'd like to clarify that the Apereo Foundation is not a

Sep 27

Yan Zhou, Agus Santosa2

Sep 24

SAML login problem between 7.2.3 and 7.2.4

This looks similar to what I encountered earlier and it affects "localhost" only. See

unread,

SAML login problem between 7.2.3 and 7.2.4

This looks similar to what I encountered earlier and it affects "localhost" only. See

Sep 24

Kenzy Perez, Ray Bon2

Sep 23

Cas360 training

That is the default authentication success page. It will show up if you are not trying to log in to a

unread,

Cas360 training

That is the default authentication success page. It will show up if you are not trying to log in to a

Sep 23

Richard Frovarp, … Eugene Willis5

Sep 23

How to change SAML attribute name

I believe in 7 build now it has changed how is setting or sending. The empty file sets it back to

unread,

How to change SAML attribute name

I believe in 7 build now it has changed how is setting or sending. The empty file sets it back to

Sep 23

Sep 19

Add signature back to Saml AuthnRequest with deletgatedAuthN?

hello, CAS7 delegated authN via SAML, noticed that CAS signs request, the signature is one of HTTP

unread,

Add signature back to Saml AuthnRequest with deletgatedAuthN?

hello, CAS7 delegated authN via SAML, noticed that CAS signs request, the signature is one of HTTP

Sep 19

Dave Steiner, Ray Bon2

Sep 19

Terminate session on netid lock

Dave, There are some actuators that can remove sessions [1], they probably existed in 6.5. Not sure

unread,

Terminate session on netid lock

Dave, There are some actuators that can remove sessions [1], they probably existed in 6.5. Not sure

Sep 19

Sep 17

Changing responses to SAML2 logout requests

Hi, Our CAS implements delegated logins as a SAML2 SP. After implementing our own logout action to

unread,

Changing responses to SAML2 logout requests

Hi, Our CAS implements delegated logins as a SAML2 SP. After implementing our own logout action to

Sep 17

Sep 15

CAS 7.2 fails on SAML2 logout request from IDP

Hi, CAS 7.2 fails on SAML2 logout request from IDP and the stacktrace (see below) complains about

unread,

CAS 7.2 fails on SAML2 logout request from IDP

Hi, CAS 7.2 fails on SAML2 logout request from IDP and the stacktrace (see below) complains about

Sep 15

Sep 13

About decorating custom data on individual and every web flow

Hello again, It's been a while and i wanted share my findings with similar solution for another

unread,

About decorating custom data on individual and every web flow

Hello again, It's been a while and i wanted share my findings with similar solution for another

Sep 13

Prakash Thapa, Ray Bon2

Sep 11

Issue with SAML login in CAS 7.2.4

Prakash, There should be logs identifying where / what the problem is. You can turn up logging for

unread,

Issue with SAML login in CAS 7.2.4

Prakash, There should be logs identifying where / what the problem is. You can turn up logging for

Sep 11

Prakash Thapa, Ray Bon6

Sep 11

Unable to customize UsernamePasswordCredential class in CAS 7.2.4

The class package matches for both custom and default and for the customized bean too. There is only

unread,

Unable to customize UsernamePasswordCredential class in CAS 7.2.4

The class package matches for both custom and default and for the customized bean too. There is only

Sep 11

Baron Fujimoto, Ray Bon8

Aug 27

Older CAS RC release notes changelog links broken?

I think defaults is defined (maybe by spring) for about a half dozen actuators; but I do not know

unread,

Older CAS RC release notes changelog links broken?

I think defaults is defined (maybe by spring) for about a half dozen actuators; but I do not know

Aug 27

Tomas Villarreal, … Stéphane Delcourt3

Aug 26

SAML2 IdP error after upgrading to 7+

Hi Tomas, We are experiencing the same issue on our 7.2.3 cas instance upgraded from 6.5 . Initially

unread,

SAML2 IdP error after upgrading to 7+

Hi Tomas, We are experiencing the same issue on our 7.2.3 cas instance upgraded from 6.5 . Initially

Aug 26

Aug 21

Refresh Token Validity

I checked the Redis from cli and the TTL was set as per the config as shared above. But the Refresh

unread,

Refresh Token Validity

I checked the Redis from cli and the TTL was set as per the config as shared above. But the Refresh

Aug 21

Aug 21

CAS 7: Default Classes Customization

I am trying to upgrade CAS from 5 to 7. In the previous version of CAS, we have been customizing the

unread,

CAS 7: Default Classes Customization

I am trying to upgrade CAS from 5 to 7. In the previous version of CAS, we have been customizing the

Aug 21

atilling, … Ray Bon7

Aug 20

Palantir is unavailable?

You would need to separate auth and palantir so only one gets the custom ui; in other words, two war

unread,

Palantir is unavailable?

You would need to separate auth and palantir so only one gets the custom ui; in other words, two war

Aug 20

Aug 19

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/08/19/simplemfa-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/08/19/simplemfa-vuln/

Aug 19

Aug 19

Simple MFA Rate Limiting

Hi, I have been trying to implement the rate limiting feature of Simple MFA. (with version 7.2.x) I

unread,

Simple MFA Rate Limiting

Hi, I have been trying to implement the rate limiting feature of Simple MFA. (with version 7.2.x) I

Aug 19

Agus Santosa, Ray Bon6

Aug 12

SAML2 service 7.1.x and 7.2.x

After further investigation, it affects localhost only because Apache's Urlvalidator considers

unread,

SAML2 service 7.1.x and 7.2.x

After further investigation, it affects localhost only because Apache's Urlvalidator considers

Aug 12

Derek Badge, Eugene Willis3

Aug 9

SAML Response Attribute Definition change between CAS 6.6.x and CAS 7.0.x and up

That makes sense. Thanks for that, it was driving me nuts. I have found the other thread referring to

unread,

SAML Response Attribute Definition change between CAS 6.6.x and CAS 7.0.x and up

That makes sense. Thanks for that, it was driving me nuts. I have found the other thread referring to

Aug 9

atilling, Agus Santosa2

Aug 7

Maven Repos missing 7.2.5 updates?

There are some changes in ./gradle/task.gradle, one of them is related to metadata repository: //

unread,

Maven Repos missing 7.2.5 updates?

There are some changes in ./gradle/task.gradle, one of them is related to metadata repository: //

Aug 7

Muhammad Ikhsan, … Richard Frovarp4

Aug 7

cannot redirect to g-suite with samlrequest

Thank you for your advice. Finally, my CAS IDP authentication was successful and I was redirected to

unread,

cannot redirect to g-suite with samlrequest

Thank you for your advice. Finally, my CAS IDP authentication was successful and I was redirected to

Aug 7

Teddy Brown, Dmitriy Kopylenko3

Aug 7

CAS as OIDC or SAML2 Client/SP

Apologies, I was looking at the "Authentication" category. I completely missed the "

unread,

CAS as OIDC or SAML2 Client/SP

Apologies, I was looking at the "Authentication" category. I completely missed the "

Aug 7

Sovannara Chhun, Ray Bon5

Aug 6

CAS Response Body

Ray, The audit log says SERVICE_TICKET_VALIDATE_SUCCESS and PROTOCOL_SPECIFICATION_VALIDATE_SUCCESS.

unread,

CAS Response Body

Ray, The audit log says SERVICE_TICKET_VALIDATE_SUCCESS and PROTOCOL_SPECIFICATION_VALIDATE_SUCCESS.

Aug 6

Search

Clear search

Close search

Google apps

Main menu