Overview Apereo CAS is best known as a Central Authentication Service server, but it can also act as a full OpenID Connect Provider, allowing applications to authenticate users with standard OAuth 2.0 and OpenID Connect flows. A typical deployment looks like this: Once configured, CAS can … [Read more...] about Configure OpenID Connect (OIDC) in Apereo CAS 7.3 and 8
Apereo CAS Office365 SAML
This article will demonstrate how to configure an Apereo CAS Office365 SAML integration. These instructions should be treated as an example and not as a production ready script. These changes should be first made in an Office365 test tenant before attempting in production. Tweak your steps and … [Read more...] about Apereo CAS Office365 SAML
Apereo CAS Access Strategy
This article will demonstrate how to create an Apereo CAS Access Strategy for customized authorization rules to specific registered services. The examples below assume you already have json registered services configured. The accessStrategy will be included in your json service. Access … [Read more...] about Apereo CAS Access Strategy
Apereo CAS Release Multi-Value Attribute
This article will demonstrate how to in Apereo CAS release a multi-value attribute. Each Service Provider (SP) is different in how they parse incoming attributes. Some may accept a comma delimited list and others may require multiple values for the same attribute. By default, attributes such as … [Read more...] about Apereo CAS Release Multi-Value Attribute
Apereo CAS Properties
This article will demonstrate how to in Apereo CAS generate a list of all supported properties. It can be tedious to comb through all of the CAS documentation related to a specific feature. Instead, try creating a list of CAS properties and search the file for properties related to the feature … [Read more...] about Apereo CAS Properties
Apereo CAS usernames
This article will demonstrate how to strip off your domain in Apereo CAS usernames being entered for authentication. Often users will be accustomed to entering an email address to sign in, but if your CAS instance requires just the username, then the log in will fail. If the email address is always … [Read more...] about Apereo CAS usernames
Apereo CAS Custom Password Policy
This article will demonstrate how to create a custom password policy in the Apereo CAS Identity Provider (IDP). This is their official documentation: https://apereo.github.io/cas/7.1.x/installation/Password-Policy-Enforcement.html. This article will not regurgitate the default password policy … [Read more...] about Apereo CAS Custom Password Policy
Apereo CAS Authentication Handler
This article will demonstrate how to configure a specific authentication handler for a given service in the Apereo CAS Identity Provider (IDP). The article assumes the json service registry is used. CAS supports multiple authentication handlers being configured at once and in my experience … [Read more...] about Apereo CAS Authentication Handler