Apereo CAS

Spec sheet

Purpose

CAS is an enterprise multilingual single sign-on solution and identity provider for the web, with authentication and authorization capabilities.Read 3 Oct 2026 · apereo.github.io

Audience

The Apereo Foundation's stated mission is to assist educational organizations with open technologies supporting learning, teaching, and research.Read 3 Oct 2026 · apereo.org

Deployment

CAS is a Java web application that requires JDK 25 for building and deployment according to its installation requirements.Read 3 Oct 2026 · apereo.github.io

Integrations

CAS has built-in integrations for many SAML2 service providers, with configuration recipes that can automate service registration and attribute-release settings.Read 3 Oct 2026 · apereo.github.io

Security

The security guide says all communication with the CAS server must use a secure channel such as TLS.Read 3 Oct 2026 · apereo.github.io

Support

Community support is voluntary and has no SLAs or guarantees; the project points users to professional support agreements from commercial providers.Read 3 Oct 2026 · apereo.github.io

License

The project’s GitHub page describes Apereo CAS as free open-source software licensed under Apache v2.Read 3 Oct 2026 · github.com

Authentication

Authentication sources include LDAP, databases, X.509, SPNEGO, JAAS, JWT, RADIUS, and MongoDB.Read 3 Oct 2026 · apereo.github.io

Client support

Official clients are listed for .NET, Java, PHP, and Apache; Spring Security, Apache Shiro, and Pac4j have built-in framework support.Read 3 Oct 2026 · apereo.github.io

Containers

Apereo publishes Docker images with each software release, while describing them primarily as quickstarts and demos.Read 3 Oct 2026 · apereo.github.io

Delegated authentication

CAS can delegate authentication to external identity providers including ADFS, Facebook, Twitter, SAML2 identity providers, and OpenID Connect providers.Read 3 Oct 2026 · apereo.github.io

Monitoring and audits

CAS can monitor application and system behavior, statistics, and metrics in real time, and centrally manage audits and logs.Read 3 Oct 2026 · apereo.github.io

Multifactor authentication

MFA providers listed include Duo Security, FIDO2 WebAuthn, Google Authenticator, and Inwebo.Read 3 Oct 2026 · apereo.github.io

Open source

The primary implementation is an open-source Java server component.Read 3 Oct 2026 · apereo.github.io

Operating systems

The installation requirements state there is no particular operating-system preference, though Linux-based installations are more common than Windows.Read 3 Oct 2026 · apereo.github.io

Paid support

The project says commercial support is available through Apereo commercial service providers, but does not list prices on this support page.Read 3 Oct 2026 · apereo.github.io

Protocols

It supports CAS, SAML, WS-Federation, OAuth 2.0, OpenID Connect, and REST protocols.Read 3 Oct 2026 · apereo.github.io

User and access features

Built-in features include password management, notifications, terms of use, impersonation, and attribute release with user consent.Read 3 Oct 2026 · apereo.github.io

Plans and prices

Every Apereo CAS plan and price →

Where Specifiction places it

• OAuth Server Software#6 of 328.6