CAS Community - Google Groups

Groups

1–30 of 5445

Welcome to the CAS community mailing list. Please take a look at the following resources to better understand support options:

Support: https://apereo.github.io/cas/Support.html
Documentation: https://apereo.github.io/cas
Blog: https://apereo.github.io/
Contributor Guidelines: https://apereo.github.io/cas/developer/Contributor-Guidelines.html

CAS is an open-source Apache v2 project under the sponsorship of the Apereo Foundation. Please review the Apereo Welcoming Policy for more info: https://www.apereo.org/content/apereo-welcoming-policy

Thank you.

0 selected

Arkady Keppert, Ray Bon2

1:34 PM

CAS SAML2 Integration Issue with Amazon Cognito (InResponseTo mismatch)

Arkady, Use a browser plugin, like SAMLtracer, to see what is in the authn request and response. Ray

unread,

CAS SAML2 Integration Issue with Amazon Cognito (InResponseTo mismatch)

Arkady, Use a browser plugin, like SAMLtracer, to see what is in the authn request and response. Ray

1:34 PM

1:31 PM

CAS Community Office Hours: #9

The next episode of CAS community office hours will be held on this Thursday, June 25th, 2026 and it

unread,

CAS Community Office Hours: #9

The next episode of CAS community office hours will be held on this Thursday, June 25th, 2026 and it

1:31 PM

12:20 PM

Changes to CAS Security Vulnerability Response

Please see https://apereo.github.io/2026/06/23/sec-grace-window/

unread,

Changes to CAS Security Vulnerability Response

Please see https://apereo.github.io/2026/06/23/sec-grace-window/

12:20 PM

Misagh, CAS Community2

12:18 PM

CAS Security Vulnerability Disclosure

Security grace window closing. Updated: https://apereo.github.io/2026/05/27/oidc-vuln/ On Wednesday,

unread,

CAS Security Vulnerability Disclosure

Security grace window closing. Updated: https://apereo.github.io/2026/05/27/oidc-vuln/ On Wednesday,

12:18 PM

Jun 20

Hi, I found the solution by extracting cas-server-support-thymeleaf and customizing the

unread,

Hi, I found the solution by extracting cas-server-support-thymeleaf and customizing the

Jun 20

Mohamed Iheb JEMAI, … Eugene Willis3

Jun 19

CAS SSO Session Timeout Not Honored by Integrated Application After Migration to CAS 7.3.5

I think by default the setting now built into cas. So you may be able to remove that stanza. I would

unread,

CAS SSO Session Timeout Not Honored by Integrated Application After Migration to CAS 7.3.5

I think by default the setting now built into cas. So you may be able to remove that stanza. I would

Jun 19

Jun 18

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/18/vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/18/vuln/

Jun 18

Mohamed Iheb JEMAI, … Eugene Willis5

Jun 15

CAS 7.3.5 SAML Attribute Names Changed to OID URNs After Migration from 6.6.15

Hi CAS Community, The samlidp-attribute-definitions.json workaround fixed the original issue, and

unread,

CAS 7.3.5 SAML Attribute Names Changed to OID URNs After Migration from 6.6.15

Hi CAS Community, The samlidp-attribute-definitions.json workaround fixed the original issue, and

Jun 15

Adarsh Kuntal, … Ray Bon3

Jun 9

[CAS 7.3.7] Login Success View Triggers POST Resubmission on Browser Refresh — Seeking PRG Pattern Guidance

Adarsh, Under most conditions, the login flow redirects to the service the user was intending to

unread,

[CAS 7.3.7] Login Success View Triggers POST Resubmission on Browser Refresh — Seeking PRG Pattern Guidance

Adarsh, Under most conditions, the login flow redirects to the service the user was intending to

Jun 9

Jun 8

CAS Community Office Hours: #8

The next episode of CAS community office hours will be held on Thursday, June 11th 2026 and it will

unread,

CAS Community Office Hours: #8

The next episode of CAS community office hours will be held on Thursday, June 11th 2026 and it will

Jun 8

Jun 8

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/06/vuln/

unread,

CAS Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/06/06/vuln/

Jun 8

livio dezorzi, Ray Bon6

Jun 5

attributes released vs id_token

Hi, After a few hours of fruitless searching, I started from scratch and the value of the problematic

unread,

attributes released vs id_token

Hi, After a few hours of fruitless searching, I started from scratch and the value of the problematic

Jun 5

spfma...@e.mail.fr, … Ray Bon4

May 29

Login page and attributes

principal-attribute-list should only return those attributes from LDAP, no more. Cas generates a

unread,

Login page and attributes

principal-attribute-list should only return those attributes from LDAP, no more. Cas generates a

May 29

Jeremiah Garmatter, … Ray Bon8

May 28

Condensing multiple SSO integrations?

Shit vendor. Tell them to include it. When the SP sends an AuthnRequest, the

unread,

Condensing multiple SSO integrations?

Shit vendor. Tell them to include it. When the SP sends an AuthnRequest, the

May 28

May 27

mod_auth_cas 1.3 Release

The mod_auth_cas team is pleased to announce the release of mod_auth_cas 1.3. https://github.com/

unread,

mod_auth_cas 1.3 Release

The mod_auth_cas team is pleased to announce the release of mod_auth_cas 1.3. https://github.com/

May 27

May 26

Instructions for Palantir users to create service entries?

Turns out I selected the SAML2-2 service definition template by mistake. Selecting the SAML2-

unread,

Instructions for Palantir users to create service entries?

Turns out I selected the SAML2-2 service definition template by mistake. Selecting the SAML2-

May 26

May 21

Java CAS Client Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/05/20/casc-jwt-vuln/

unread,

Java CAS Client Security Vulnerability Disclosure

Please see https://apereo.github.io/2026/05/20/casc-jwt-vuln/

May 21

May 19

CAS Community Office Hours: #7

The next episode of CAS community office hours will be held on this Thursday, May 21st, 2026 and it

unread,

CAS Community Office Hours: #7

The next episode of CAS community office hours will be held on this Thursday, May 21st, 2026 and it

May 19

Mohamed Iheb JEMAI, … Ray Bon7

May 11

CAS 7.3.5 Migration - 403 Forbidden when accessing service registry

Mohamed, Some of the endpoints are built into spring [1], some are custom to cas. Most of the

unread,

CAS 7.3.5 Migration - 403 Forbidden when accessing service registry

Mohamed, Some of the endpoints are built into spring [1], some are custom to cas. Most of the

May 11

May 1

CAS Community Office Hours: #6

The next episode of CAS community office hours will be held on Tuesday, May 5th 2026 and it will run

unread,

CAS Community Office Hours: #6

The next episode of CAS community office hours will be held on Tuesday, May 5th 2026 and it will run

May 1

Alex Kauchak, Ray Bon4

Apr 30

Issue with redirecting after interrupt

Alex, If you have the crypto values set correctly, do you still need the custom configuration? You

unread,

Issue with redirecting after interrupt

Alex, If you have the crypto values set correctly, do you still need the custom configuration? You

Apr 30

livio dezorzi, Ray Bon5

Apr 30

Trigger or Bypass MFA

Livio, You can find that message in https://github.com/apereo/cas/blob/master/support/cas-server-

unread,

Trigger or Bypass MFA

Livio, You can find that message in https://github.com/apereo/cas/blob/master/support/cas-server-

Apr 30

Maxwell, Gary, Ray Bon2

Apr 24

Problem with using both SAML and CAS protocols to Service Providers that are on the same domain

Gary, It should work. Each service will need to have a different serviceId (I believe this is a keyed

unread,

Problem with using both SAML and CAS protocols to Service Providers that are on the same domain

Gary, It should work. Each service will need to have a different serviceId (I believe this is a keyed

Apr 24

Tomi Karlstedt, Jakub Koudelka3

Apr 24

The new SAML2 metadata aggregate not working in CAS 7.3.x

Not really, no. I saw that the first problem was fixed in a commit right after my message (https://

unread,

The new SAML2 metadata aggregate not working in CAS 7.3.x

Not really, no. I saw that the first problem was fixed in a commit right after my message (https://

Apr 24

Jakub Koudelka, Pascal Rigaux3

Apr 21

Link external provider id to local account

Hi, > Did you try something like /cas/clientredirect?client_name=Google ? In fact I did not,

unread,

Link external provider id to local account

Hi, > Did you try something like /cas/clientredirect?client_name=Google ? In fact I did not,

Apr 21

CAS Community, … Camille HERRY19

Apr 20

phpCAS next maintainer: public vote

Thank you for the feedback. We have a total of 8 binding votes for +1s with no -1s. As a result, we

unread,

phpCAS next maintainer: public vote

Thank you for the feedback. We have a total of 8 binding votes for +1s with no -1s. As a result, we

Apr 20

Apr 18

Setting OIDC profile details during dynamic registration

Hi, I am looking to set OIDC profile attributes on dynamic registration (as per https://datatracker.

unread,

Setting OIDC profile details during dynamic registration

Hi, I am looking to set OIDC profile attributes on dynamic registration (as per https://datatracker.

Apr 18

Apr 14

CAS Community Office Hours: #5

The next episode of CAS community office hours will be held on this Thursday, April 16th, 2026 and it

unread,

CAS Community Office Hours: #5

The next episode of CAS community office hours will be held on this Thursday, April 16th, 2026 and it

Apr 14

Jeffrey Ramsay, … Eugene Willis10

Apr 8

reCAPTCHA validation failed.

I know this is the old feed. But has anyone add captcha on cas vr 7.3.3? On Tuesday, September 6,

unread,

reCAPTCHA validation failed.

I know this is the old feed. But has anyone add captcha on cas vr 7.3.3? On Tuesday, September 6,

Apr 8

Apr 4

Issue with CAS 7.2.4 OIDC ID Token

Hi, I was using CAS OIDC ID Token to call the AWS resources. It was working fine with CAS 5.2.2 but

unread,

Issue with CAS 7.2.4 OIDC ID Token

Hi, I was using CAS OIDC ID Token to call the AWS resources. It was working fine with CAS 5.2.2 but

Apr 4

Search

Clear search

Close search

Google apps

Main menu