Groups

CAS Community

1–30 of 5329

Welcome to the CAS community mailing list. Please take a look at the following resources to better understand support options:

Support: https://apereo.github.io/cas/Support.html
Documentation: https://apereo.github.io/cas
Blog: https://apereo.github.io/
Contributor Guidelines: https://apereo.github.io/cas/developer/Contributor-Guidelines.html

CAS is an open-source Apache v2 project under the sponsorship of the Apereo Foundation. Please review the Apereo Welcoming Policy for more info: https://www.apereo.org/content/apereo-welcoming-policy

Thank you.

0 selected

Oct 17

7.2.6 : No transition found on occurence of event 'unavailable' in state 'mfa-simple' of flow 'pswdreset'

We ended up finding the right parameter to deactivate the mfa when resetting the password... I

unread,

7.2.6 : No transition found on occurence of event 'unavailable' in state 'mfa-simple' of flow 'pswdreset'

We ended up finding the right parameter to deactivate the mfa when resetting the password... I

Oct 17

Vincenzo Colonnella, … Petr Bodnár4

Oct 17

Missing logout with OpenID Connect delegation

FYI, we have actually run into the same problem (it seems to affect not just the delegation flow) and

unread,

Missing logout with OpenID Connect delegation

FYI, we have actually run into the same problem (it seems to affect not just the delegation flow) and

Oct 17

Akash Mohapatra, Ray Bon4

Oct 16

CAS 7.1.3: Service Registry not loading custom table that is created to store service registry

Thanks Ron for giving this insight about CAS. Yes, we just started this year to migrate CAS from 3 to

unread,

CAS 7.1.3: Service Registry not loading custom table that is created to store service registry

Thanks Ron for giving this insight about CAS. Yes, we just started this year to migrate CAS from 3 to

Oct 16

Yan Zhou, Ray Bon4

Oct 15

objects not available in conversation scope, delegated authN?

I tried that, generating key size 512, but made no difference. cas.authn.pac4j.core.

unread,

objects not available in conversation scope, delegated authN?

I tried that, generating key size 512, but made no difference. cas.authn.pac4j.core.

Oct 15

Oct 15

CAS 7.0 - "Delegated Authentication Failure" even though no delegation is triggered

Hello, after configuring delegated authentication in CAS 7.0.6, we are getting incorrect error page

unread,

CAS 7.0 - "Delegated Authentication Failure" even though no delegation is triggered

Hello, after configuring delegated authentication in CAS 7.0.6, we are getting incorrect error page

Oct 15

Oct 15

CAS ignores post_logout_redirect_uri when default login/logout URL is set

Hello, we have found several surprising issues/bugs in the CAS class DefaultLogoutRedirectionStrategy

unread,

CAS ignores post_logout_redirect_uri when default login/logout URL is set

Hello, we have found several surprising issues/bugs in the CAS class DefaultLogoutRedirectionStrategy

Oct 15

Xavier Rodríguez

Oct 15

Problems with rotation OIDC-JWKS in CAS V.7.2.* and V.7.3.*

Hi, I'm trying to set up jwks file key rotation on my CAS server, but I'm not able to. The

unread,

Problems with rotation OIDC-JWKS in CAS V.7.2.* and V.7.3.*

Hi, I'm trying to set up jwks file key rotation on my CAS server, but I'm not able to. The

Oct 15

Ocean Liu, … Pascal Rigaux4

Oct 14

CAS v7.2.x recurring outage issue, unresponsive, no logs

Hi Richard and Pascal, Thank you for the help! We will explore the external tomcat option. On Tuesday

unread,

CAS v7.2.x recurring outage issue, unresponsive, no logs

Hi Richard and Pascal, Thank you for the help! We will explore the external tomcat option. On Tuesday

Oct 14

Amy Colfer, … Jeremiah Garmatter8

Oct 7

Login Issues with Android Apps

Thank you all for your insight—you were spot on! 😊 We had implemented it, but placed it outside our

unread,

Login Issues with Android Apps

Thank you all for your insight—you were spot on! 😊 We had implemented it, but placed it outside our

Oct 7

Preethy Venkat, Ray Bon2

Oct 7

PKCE Code Verifier Issue on CAS 6.2.8 and Build Failures During Upgrade to 6.4.6

Preethy, I suggest you move to the latest version 7.2.x or 7.3 [1] You will have to verify

unread,

PKCE Code Verifier Issue on CAS 6.2.8 and Build Failures During Upgrade to 6.4.6

Preethy, I suggest you move to the latest version 7.2.x or 7.3 [1] You will have to verify

Oct 7

Yan Zhou, Ray Bon3

Oct 6

store-for-match-later in delegated authN

that is true! I tried PrincipalIdAttribute, the flow made no difference. But the problem remains. say

unread,

store-for-match-later in delegated authN

that is true! I tried PrincipalIdAttribute, the flow made no difference. But the problem remains. say

Oct 6

Yan Zhou, Agus Santosa4

Oct 6

SAML login problem between 7.2.3 and 7.2.4

Adding this config seems to make it work with localhost: (I tested with 7.2.7) cas.http-client.allow-

unread,

SAML login problem between 7.2.3 and 7.2.4

Adding this config seems to make it work with localhost: (I tested with 7.2.7) cas.http-client.allow-

Oct 6

steven gladwell, Ocean Liu2

Oct 6

Subject: [SOLVED] CAS 7.1.6 Automatic Configuration Reloading in Standalone Mode - Undocumented Property

Thanks for sharing! This is so helpful! On Sunday, October 5, 2025 at 7:32:58 AM UTC-7 steven

unread,

Subject: [SOLVED] CAS 7.1.6 Automatic Configuration Reloading in Standalone Mode - Undocumented Property

Thanks for sharing! This is so helpful! On Sunday, October 5, 2025 at 7:32:58 AM UTC-7 steven

Oct 6

Bill Baran (Sirkut), Y G3

Oct 3

v6.6.x Problems with gauth backup scratch codes when encrypting

Hello again, On the latest Cas Overlay(7.3.0-RC4), to make scratch code encryption work on Oracle

unread,

v6.6.x Problems with gauth backup scratch codes when encrypting

Hello again, On the latest Cas Overlay(7.3.0-RC4), to make scratch code encryption work on Oracle

Oct 3

Baron Fujimoto, … Jonathon Taylor4

Oct 3

Multiple Instances of Duo MFA clarifications?

Hi Baron, Not sure if this helps with your use-case, but we are able to override the global Duo

unread,

Multiple Instances of Duo MFA clarifications?

Hi Baron, Not sure if this helps with your use-case, but we are able to override the global Duo

Oct 3

Akash Mohapatra

Oct 2

CAS 7.1.3 bootrun is failing since morning OCT 1

Hello All, we see the Apereo CAS 7.1.3 has been getting stuck with below stacktrace since the morning

unread,

CAS 7.1.3 bootrun is failing since morning OCT 1

Hello All, we see the Apereo CAS 7.1.3 has been getting stuck with below stacktrace since the morning

Oct 2

Sep 30

CAS 7.2.5, why this condition is Not met, entries exist in application.properties

Never mind, I did not correctly specify the location of the JSON file. Yan On Tuesday, September 30,

unread,

CAS 7.2.5, why this condition is Not met, entries exist in application.properties

Never mind, I did not correctly specify the location of the JSON file. Yan On Tuesday, September 30,

Sep 30

Frédéric Dussurget

Sep 30

DELETE operation via RESTful service Registry in 7.3.x does not work anymore

Hi, context : CAS 7.3.0-RC3, Redis for all (including registry) The following DELETE operation on any

unread,

DELETE operation via RESTful service Registry in 7.3.x does not work anymore

Hi, context : CAS 7.3.0-RC3, Redis for all (including registry) The following DELETE operation on any

Sep 30

Sep 29

Re: SAML2 as idp no longer working after migrating from 6.6.7 to 7.2.6

entityID is just a string of characters [that should be at least globally unique]. The cas serviceId

unread,

Re: SAML2 as idp no longer working after migrating from 6.6.7 to 7.2.6

entityID is just a string of characters [that should be at least globally unique]. The cas serviceId

Sep 29

Sep 29

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/09/25/oauth-oidc-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/09/25/oauth-oidc-vuln/

Sep 29

Sep 27

Re: [apereo-info] Urgent Support Needed for Uninstalling from Chrome on Mac

Dear Alice, Thank you for reaching out. I'd like to clarify that the Apereo Foundation is not a

unread,

Re: [apereo-info] Urgent Support Needed for Uninstalling from Chrome on Mac

Dear Alice, Thank you for reaching out. I'd like to clarify that the Apereo Foundation is not a

Sep 27

Kenzy Perez, Ray Bon2

Sep 23

Cas360 training

That is the default authentication success page. It will show up if you are not trying to log in to a

unread,

Cas360 training

That is the default authentication success page. It will show up if you are not trying to log in to a

Sep 23

Richard Frovarp, … Eugene Willis5

Sep 23

How to change SAML attribute name

I believe in 7 build now it has changed how is setting or sending. The empty file sets it back to

unread,

How to change SAML attribute name

I believe in 7 build now it has changed how is setting or sending. The empty file sets it back to

Sep 23

Sep 19

Add signature back to Saml AuthnRequest with deletgatedAuthN?

hello, CAS7 delegated authN via SAML, noticed that CAS signs request, the signature is one of HTTP

unread,

Add signature back to Saml AuthnRequest with deletgatedAuthN?

hello, CAS7 delegated authN via SAML, noticed that CAS signs request, the signature is one of HTTP

Sep 19

Dave Steiner, Ray Bon2

Sep 19

Terminate session on netid lock

Dave, There are some actuators that can remove sessions [1], they probably existed in 6.5. Not sure

unread,

Terminate session on netid lock

Dave, There are some actuators that can remove sessions [1], they probably existed in 6.5. Not sure

Sep 19

Sep 17

Changing responses to SAML2 logout requests

Hi, Our CAS implements delegated logins as a SAML2 SP. After implementing our own logout action to

unread,

Changing responses to SAML2 logout requests

Hi, Our CAS implements delegated logins as a SAML2 SP. After implementing our own logout action to

Sep 17

Sep 15

CAS 7.2 fails on SAML2 logout request from IDP

Hi, CAS 7.2 fails on SAML2 logout request from IDP and the stacktrace (see below) complains about

unread,

CAS 7.2 fails on SAML2 logout request from IDP

Hi, CAS 7.2 fails on SAML2 logout request from IDP and the stacktrace (see below) complains about

Sep 15

Sep 13

About decorating custom data on individual and every web flow

Hello again, It's been a while and i wanted share my findings with similar solution for another

unread,

About decorating custom data on individual and every web flow

Hello again, It's been a while and i wanted share my findings with similar solution for another

Sep 13

Prakash Thapa, Ray Bon2

Sep 11

Issue with SAML login in CAS 7.2.4

Prakash, There should be logs identifying where / what the problem is. You can turn up logging for

unread,

Issue with SAML login in CAS 7.2.4

Prakash, There should be logs identifying where / what the problem is. You can turn up logging for

Sep 11

Prakash Thapa, Ray Bon6

Sep 11

Unable to customize UsernamePasswordCredential class in CAS 7.2.4

The class package matches for both custom and default and for the customized bean too. There is only

unread,

Unable to customize UsernamePasswordCredential class in CAS 7.2.4

The class package matches for both custom and default and for the customized bean too. There is only

Sep 11

Search

Clear search

Close search

Google apps

Main menu