Question about CAS and Shibboleth v4.0.1

Joseph Fischetti Joseph.Fischetti at
Thu Jun 11 17:29:15 UTC 2020

That's major.  As always, thanks for taking the time to talk through things.

I'll update our cas-protocol.xml so it doesn't try to look at a metadata registry anymore, or I'll move it so it looks it up after the local registry.  At least the warnings will be gone.

-----Original Message-----
From: users <users-bounces at> On Behalf Of Cantor, Scott
Sent: Thursday, June 11, 2020 12:08 PM
To: Shib Users <users at>
Subject: Re: Question about CAS and Shibboleth v4.0.1


On 6/11/20, 11:42 AM, "users on behalf of Joseph Fischetti" <users-bounces at on behalf of Joseph.Fischetti at> wrote:

> What tells the IdP to look in metadata for CAS services?

Your copy of cas-protocol.xml is probably just pre-3.whatever and doesn't have this comment inside it.

       | Uncomment this bean if you want to override the default list of CAS service registries.
       | The default configuration tries to find the relying party in a SAML metadata source and falls back to
       | reloadableServiceRegistry if a match is not found.
    <!--<util:list id="shibboleth.CASServiceRegistries">
        <ref bean="shibboleth.CASMetadataServiceRegistry" />
        <ref bean="shibboleth.CASServiceRegistry" />

The CAS docs are very implicit and rely on reading comments in files.

-- Scott

For Consortium Member technical support, see
To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list