CAS 7.3.3 Performance: 6-second delay in login flow post-MFA

[Aditi Deshmukh]

Hello CAS Community,
We recently upgraded from CAS 6.5.2 to CAS 7.3.3. While the upgrade was successful, we are seeing a significant performance regression. The login flow takes approximately 5-7 seconds longer than it did on 6.5.2.

 We have:

Authentication: LDAP with attribute resolution

MFA: Duo Universal Prompt
Features: Interrupt (REST-based), JPA Service Registry, OIDC/OAuth

 The delay occurs specifically after the Duo MFA prompt is completed and before the final redirect to the service. Through troubleshooting, we discovered that commenting out the Interrupt configuration removes the additional 6-second delay entirely.

Our Interrupt configuration uses a REST API that queries a database via a separate Java application.

 Any insights or similar experiences with CAS 7.x performance tuning would be greatly appreciated.

Thanks

Aditi