Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Apereo CAS (Central Authentication Service) is a large-scale enterprise authentication and single sign-on (SSO) server built with Java 25+, Spring Boot 3.x, Spring Cloud, and Spring Webflow, organized as a 500+ module Gradle monorepo with strict layering between API contracts, core implementations, support features, and web applications. The project handles identity management and authorization across multiple protocols including SAML2, OAuth2, OpenID Connect, LDAP, and multi-factor authentication integrations like Duo Security and FIDO. Maintained by Apereo, an open-source community organization, CAS is designed to be extensible through annotation-driven configuration and feature toggles, with security-sensitive areas in authentication, authorization, tickets, and cryptography treated as core concerns that require careful adherence to existing patterns and comprehensive testing.