Apereo CAS

Spec sheet

Purpose

CAS is a multilingual single sign-on solution and open-source identity provider for web authentication and authorization.Read 1 Oct 2026 · apereo.org

Audience

CAS originated in higher education and is also described as adaptable to Fortune 500 companies and small special-purpose installations.Read 1 Oct 2026 · apereo.org

Integrations

CAS provides integrations with SAML2 service providers and supports SCIM, reCAPTCHA, and Swagger.Read 1 Oct 2026 · apereo.github.io

Support

Apereo staff do not provide technical project support but direct users to project communities and mailing lists, including CAS security, developer, and user lists.Read 1 Oct 2026 · apereo.org

License

Apereo CAS is distributed under the Apache License, Version 2.0.Read 1 Oct 2026 · apereo.org

Authentication sources

Pluggable authentication support includes LDAP, databases, X.509, SPNEGO, JAAS, JWT, RADIUS, and MongoDB.Read 1 Oct 2026 · apereo.github.io

Clients

Cross-platform client support includes Java, .NET, PHP, Perl, and Apache clients.Read 1 Oct 2026 · apereo.github.io

Delegated authentication

CAS can delegate authentication to external providers such as ADFS, Facebook, Twitter, SAML2 identity providers, and OpenID Connect providers.Read 1 Oct 2026 · apereo.github.io

Latest release

Apereo announced CAS version 7.3.6 on April 8, 2026.Read 1 Oct 2026 · apereo.org

Middleware

CAS operates as middleware between web applications and authentication sources, providing a unified authentication point.Read 1 Oct 2026 · apereo.org

Multifactor providers

Supported multifactor providers include Duo Security, YubiKey, RSA/RADIUS, Google Authenticator, FIDO2 WebAuthn, Twilio, Inwebo, and CAS Simple.Read 1 Oct 2026 · apereo.github.io

Operations

CAS can monitor application and system behavior, statistics, and metrics in real time and centrally manage audits and logs.Read 1 Oct 2026 · apereo.github.io

Protocols

The project supports CAS, SAML v1, SAML v2, WS-Federation, OAuth2, OpenID Connect, and REST protocols.Read 1 Oct 2026 · apereo.github.io

Security features

CAS provides session management, single logout, and passwordless multifactor authentication.Read 1 Oct 2026 · apereo.org

WebAuthn security

WebAuthn support uses public-key cryptography for phishing-resistant authentication and can use security keys or built-in platform authenticators.Read 1 Oct 2026 · apereo.github.io

Plans and prices

Every Apereo CAS plan and price →

Where Specifiction places it

• Authentication Software#11 of 318.2
• Single Sign-On Software#13 of 348.2