> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/v4/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/v4/llms-full.txt.

# Integrate CAS authentication

## About CAS

**Central Authentication Service (CAS)** is a Single Sign-On (SSO) protocol designed to provide centralized authentication for multiple applications. Developed by Yale University, CAS allows users to access multiple protected services with a single login, eliminating the need to re-enter credentials. It implements authentication through a "ticket" mechanism and supports various identity providers, such as databases, LDAP, and OAuth.

## How to configure


1

In the right area of the top navigation bar, click .

![image](/docs/images/docs/navs/nav-settings.png)

2

Navigate to the **System settings > Authentication > CAS**.

3

In the **CAS** field, check to enable CAS authentication.

4

In the **Server** field,  type the CAS server URI, such as "https\://​example.com/cas".

5

In the **Proxy server** field,  type the CAS proxy server URI if behind a proxy. For example, if the host listens on "http\://​foo.bar:8080" but requests use "https\://​foo.bar:8443", enter "https\://​foo.bar:8443", For more information, see [Django CAS configuration](https://djangocas.dev/docs/latest/configuration.html#cas-root-proxied-as-optional).

6

In the **Version** field, type the CAS protocol version: 1, 2, 3, or CAS_2_SAML_1_0.
The default is "3".

7

In the **User attribute** field, type the user attribute mapping. The key represents the CAS user attribute name, while the value corresponds to the JumpServer user attribute name (available options: name, username, email, groups, phone, comment).
```json title="CAS User Attribute Example"
{
  "cas:user": "username",
  "cas:fullname": "name",
  "cas:mail": "email",
}
```

8

<Icon name="xpack" /> In the **Organization** field, after authentication and creation, the user will be added to the selected organization.

9

In the **Create user** field, when checked, a user will be created upon successful authentication.

Warning

When unchecked and the user does not exist, authentication will fail.

10

In the **Logout completely** field, when checked, logging out will also log the user out from the CAS service.

11

Click **Submit**.

## JumpServer CAS URLs

```md title="Login URL"
https://jumpserver.example.com/core/auth/cas/login/
```

```md title="Login Success Callback URL"
https://jumpserver.example.com/core/auth/cas/callback/
```

```md title="Logout URL"
https://jumpserver.example.com/core/auth/cas/logout/
```