Groups

CAS Community

1–30 of 5304

Welcome to the CAS community mailing list. Please take a look at the following resources to better understand support options:

Support: https://apereo.github.io/cas/Support.html
Documentation: https://apereo.github.io/cas
Blog: https://apereo.github.io/
Contributor Guidelines: https://apereo.github.io/cas/developer/Contributor-Guidelines.html

CAS is an open-source Apache v2 project under the sponsorship of the Apereo Foundation. Please review the Apereo Welcoming Policy for more info: https://www.apereo.org/content/apereo-welcoming-policy

Thank you.

0 selected

Prakash Thapa, Ray Bon5

Sep 3

Unable to customize UsernamePasswordCredential class in CAS 7.2.4

Prakash, Do the full path hierarchies match? That is, is it possible there is another

unread,

Unable to customize UsernamePasswordCredential class in CAS 7.2.4

Prakash, Do the full path hierarchies match? That is, is it possible there is another

Sep 3

Baron Fujimoto, Ray Bon8

Aug 27

Older CAS RC release notes changelog links broken?

I think defaults is defined (maybe by spring) for about a half dozen actuators; but I do not know

unread,

Older CAS RC release notes changelog links broken?

I think defaults is defined (maybe by spring) for about a half dozen actuators; but I do not know

Aug 27

Tomas Villarreal, … Stéphane Delcourt3

Aug 26

SAML2 IdP error after upgrading to 7+

Hi Tomas, We are experiencing the same issue on our 7.2.3 cas instance upgraded from 6.5 . Initially

unread,

SAML2 IdP error after upgrading to 7+

Hi Tomas, We are experiencing the same issue on our 7.2.3 cas instance upgraded from 6.5 . Initially

Aug 26

Aug 21

Refresh Token Validity

I checked the Redis from cli and the TTL was set as per the config as shared above. But the Refresh

unread,

Refresh Token Validity

I checked the Redis from cli and the TTL was set as per the config as shared above. But the Refresh

Aug 21

Aug 21

CAS 7: Default Classes Customization

I am trying to upgrade CAS from 5 to 7. In the previous version of CAS, we have been customizing the

unread,

CAS 7: Default Classes Customization

I am trying to upgrade CAS from 5 to 7. In the previous version of CAS, we have been customizing the

Aug 21

atilling, … Ray Bon7

Aug 20

Palantir is unavailable?

You would need to separate auth and palantir so only one gets the custom ui; in other words, two war

unread,

Palantir is unavailable?

You would need to separate auth and palantir so only one gets the custom ui; in other words, two war

Aug 20

Aug 19

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/08/19/simplemfa-vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2025/08/19/simplemfa-vuln/

Aug 19

Aug 19

Simple MFA Rate Limiting

Hi, I have been trying to implement the rate limiting feature of Simple MFA. (with version 7.2.x) I

unread,

Simple MFA Rate Limiting

Hi, I have been trying to implement the rate limiting feature of Simple MFA. (with version 7.2.x) I

Aug 19

Agus Santosa, Ray Bon6

Aug 12

SAML2 service 7.1.x and 7.2.x

After further investigation, it affects localhost only because Apache's Urlvalidator considers

unread,

SAML2 service 7.1.x and 7.2.x

After further investigation, it affects localhost only because Apache's Urlvalidator considers

Aug 12

Derek Badge, Eugene Willis3

Aug 9

SAML Response Attribute Definition change between CAS 6.6.x and CAS 7.0.x and up

That makes sense. Thanks for that, it was driving me nuts. I have found the other thread referring to

unread,

SAML Response Attribute Definition change between CAS 6.6.x and CAS 7.0.x and up

That makes sense. Thanks for that, it was driving me nuts. I have found the other thread referring to

Aug 9

atilling, Agus Santosa2

Aug 7

Maven Repos missing 7.2.5 updates?

There are some changes in ./gradle/task.gradle, one of them is related to metadata repository: //

unread,

Maven Repos missing 7.2.5 updates?

There are some changes in ./gradle/task.gradle, one of them is related to metadata repository: //

Aug 7

Muhammad Ikhsan, … Richard Frovarp4

Aug 7

cannot redirect to g-suite with samlrequest

Thank you for your advice. Finally, my CAS IDP authentication was successful and I was redirected to

unread,

cannot redirect to g-suite with samlrequest

Thank you for your advice. Finally, my CAS IDP authentication was successful and I was redirected to

Aug 7

Teddy Brown, Dmitriy Kopylenko3

Aug 7

CAS as OIDC or SAML2 Client/SP

Apologies, I was looking at the "Authentication" category. I completely missed the "

unread,

CAS as OIDC or SAML2 Client/SP

Apologies, I was looking at the "Authentication" category. I completely missed the "

Aug 7

Sovannara Chhun, Ray Bon5

Aug 6

CAS Response Body

Ray, The audit log says SERVICE_TICKET_VALIDATE_SUCCESS and PROTOCOL_SPECIFICATION_VALIDATE_SUCCESS.

unread,

CAS Response Body

Ray, The audit log says SERVICE_TICKET_VALIDATE_SUCCESS and PROTOCOL_SPECIFICATION_VALIDATE_SUCCESS.

Aug 6

Kostas Kalevras

Aug 4

Make JSON Service Registry read only

Hello team We are using Apereo CAS in production with the JPA Service Registry and are planning to

unread,

Make JSON Service Registry read only

Hello team We are using Apereo CAS in production with the JPA Service Registry and are planning to

Aug 4

Jérôme Rautureau

Aug 1

maven sonatype repositories down

Hello everybody, have you seen that ? https://ralph.blog.imixs.com/2025/07/07/maven-sonatype-central-

unread,

maven sonatype repositories down

Hello everybody, have you seen that ? https://ralph.blog.imixs.com/2025/07/07/maven-sonatype-central-

Aug 1

Anitha C, … Anthony Oslund4

Aug 1

JPA ticket registry cleaner fails to clean expired tickets

Ran into a similar problem with MFA cleanup with CAS 6.6.6 problem was caused by an improperly

unread,

JPA ticket registry cleaner fails to clean expired tickets

Ran into a similar problem with MFA cleanup with CAS 6.6.6 problem was caused by an improperly

Aug 1

steven gladwell

Jul 30

Possible Bug: Ticket Cleaner in CAS Skips Expired Tickets When Using Firestore Registry

Hey all, I've been troubleshooting an issue where expired tickets aren't getting cleaned up

unread,

Possible Bug: Ticket Cleaner in CAS Skips Expired Tickets When Using Firestore Registry

Hey all, I've been troubleshooting an issue where expired tickets aren't getting cleaned up

Jul 30

Jeremiah Garmatter, Ray Bon9

Jul 29

SAML2 IdP Error

Jeremiah, Could this behaviour be related to some strange attribute retrieval problem; where the

unread,

SAML2 IdP Error

Jeremiah, Could this behaviour be related to some strange attribute retrieval problem; where the

Jul 29

Jul 29

AI and CAS development

Hello, We use CAS 6.4.x and will move to CAS7. The company is looking for ways to use AI (Github

unread,

AI and CAS development

Hello, We use CAS 6.4.x and will move to CAS7. The company is looking for ways to use AI (Github

Jul 29

Kostas Kalevras, … Ray Bon3

Jul 28

compileOnly and implementation dependencies

Kostas, More old school than an LLM; take the unmet dependency class and search the Cas code base for

unread,

compileOnly and implementation dependencies

Kostas, More old school than an LLM; take the unmet dependency class and search the Cas code base for

Jul 28

Brian T. Huntley, … Ray Bon4

Jul 28

Removing ST/TGT's on demand

Brian, There are actuator endpoints for just such a thing, https://apereo.github.io/cas/7.2.x/

unread,

Removing ST/TGT's on demand

Brian, There are actuator endpoints for just such a thing, https://apereo.github.io/cas/7.2.x/

Jul 28

Laurent PELLISSIER, Ray Bon2

Jul 28

CAS 7.2 works with embeded Tomcat but not when served by Jetty

Laurent, What are the java exceptions? The FlowExecutionException is not likely the cause of the

unread,

CAS 7.2 works with embeded Tomcat but not when served by Jetty

Laurent, What are the java exceptions? The FlowExecutionException is not likely the cause of the

Jul 28

Julien Sabatier

Jul 24

Need help with CAS 7.2 and OAuth

I'm trying to setup a helm chart to easily deploy CAS Currently, I have : - A docker image :

unread,

Need help with CAS 7.2 and OAuth

I'm trying to setup a helm chart to easily deploy CAS Currently, I have : - A docker image :

Jul 24

Jul 15

MFA audit events

Hi, CAS is currently sending AUTHENTICATION_SUCESS and AUTHENTICATION_FAILED events for MFA. Is there

unread,

MFA audit events

Hi, CAS is currently sending AUTHENTICATION_SUCESS and AUTHENTICATION_FAILED events for MFA. Is there

Jul 15

Kanad Patil, Richard Frovarp3

Jul 13

CAS Deployment Issue on Apache Tomcat 10

Thank you so much.. Resolved this issue. On Friday, 11 July 2025 at 8:58:40 pm UTC+5:30 Richard

unread,

CAS Deployment Issue on Apache Tomcat 10

Thank you so much.. Resolved this issue. On Friday, 11 July 2025 at 8:58:40 pm UTC+5:30 Richard

Jul 13

Matthew Gordon, Nordy Di Marzio2

Jul 11

MFA gauth brute force

Hello, I am facing the same challenge trying to prevent such problem(brute force on scratch codes)

unread,

MFA gauth brute force

Hello, I am facing the same challenge trying to prevent such problem(brute force on scratch codes)

Jul 11

spfma...@e.mail.fr, … AJ5

Jul 11

[7.2.3] OIDC problems

Hi, Thank you very much, two keys needed to be replaced (cas.tgc.crypto.encryption.key and cas.authn.

unread,

[7.2.3] OIDC problems

Hi, Thank you very much, two keys needed to be replaced (cas.tgc.crypto.encryption.key and cas.authn.

Jul 11

Richard Frovarp, … Florian Nari4

Jul 8

Deadlock on startup

We're working towards that solution. But I think it would be ideal if the system didn't open

unread,

Deadlock on startup

We're working towards that solution. But I think it would be ideal if the system didn't open

Jul 8

Aaron Chantrill, … Pablo Vidaurri5

Jul 5

invalid cookie. Required remote address does not match

I am also starting to see this same error in my logs and users complaining of sessions only lasting a

unread,

invalid cookie. Required remote address does not match

I am also starting to see this same error in my logs and users complaining of sessions only lasting a

Jul 5

Search

Clear search

Close search

Google apps

Main menu