Apereo CAS

What it does

Audience

The Apereo Foundation's stated mission is to assist educational organizations with open technologies supporting learning, teaching, and research.checked 3 Oct 2026

Authentication

Authentication sources include LDAP, databases, X.509, SPNEGO, JAAS, JWT, RADIUS, and MongoDB.checked 3 Oct 2026

Client support

Official clients are listed for .NET, Java, PHP, and Apache; Spring Security, Apache Shiro, and Pac4j have built-in framework support.checked 3 Oct 2026

Containers

Apereo publishes Docker images with each software release, while describing them primarily as quickstarts and demos.checked 3 Oct 2026

Delegated authentication

CAS can delegate authentication to external identity providers including ADFS, Facebook, Twitter, SAML2 identity providers, and OpenID Connect providers.checked 3 Oct 2026

Deployment

CAS is a Java web application that requires JDK 25 for building and deployment according to its installation requirements.checked 3 Oct 2026

Integrations

CAS has built-in integrations for many SAML2 service providers, with configuration recipes that can automate service registration and attribute-release settings.checked 3 Oct 2026

License

The project’s GitHub page describes Apereo CAS as free open-source software licensed under Apache v2.checked 3 Oct 2026

Monitoring and audits

CAS can monitor application and system behavior, statistics, and metrics in real time, and centrally manage audits and logs.checked 3 Oct 2026

Multifactor authentication

CAS supports multifactor authentication providers including Duo Security, FIDO2 WebAuthn, Google Authenticator, and Inwebo.checked 3 Oct 2026

Open source

The primary implementation is an open-source Java server component.checked 3 Oct 2026

Operating systems

The installation requirements state there is no particular operating-system preference, though Linux-based installations are more common than Windows.checked 3 Oct 2026

Paid support

The project says commercial support is available through Apereo commercial service providers, but does not list prices on this support page.checked 3 Oct 2026

Protocols

Supported protocols include CAS, OAuth, OpenID Connect, WS-Federation, SAML 1 and 2, and REST.checked 3 Oct 2026

Purpose

CAS is an enterprise multilingual single sign-on solution and identity provider for the web, with authentication and authorization capabilities.checked 3 Oct 2026

Security

The security guide says all communication with the CAS server and connections from it to applications must use HTTPS.checked 3 Oct 2026

Support

Community support is voluntary and has no SLAs or guarantees; the project points users to professional support agreements from commercial providers.checked 3 Oct 2026

User and access features

Built-in features include password management, notifications, terms of use, impersonation, and attribute release with user consent.checked 3 Oct 2026