	Service	URL	Description

The wizard-based service editor is a work in progress and not all features are supported yet. Use with caution and consider using the plain-text editor for production use cases. Verify with release notes for updates on the wizard functionality and feel free to contribute! Keep the registration record as simple as possible; do NOT modify settings or assign values unless you fully understand their purpose and implications. The generation process will only accept and process non-default values to keep the service definition clean and concise.

The following application type is chosen:

General

This section defines basic properties and settings that can be assigned to an application.

OAuth / OpenID Connect Relying Party

This section defines properties and settings applicable to OAuth or OpenID Connect relying parties.

SAML2 Service Provider

This section defines properties and settings applicable to SAML2 service providers.

Attribute Name Formats

Attribute Friendly Names

Attribute Value Types

Metadata Criteria Entity Attributes

WS-Federation Relying Party

This section defines properties and settings applicable to WS-Federation relying parties.

Application Expiration Policy

Ticket-Granting Ticket Expiration Policy

Service Ticket Expiration Policy

Proxy-granting Ticket Expiration Policy

Proxy Ticket Expiration Policy

Proxy Policy

OAuth / OpenID Connect TLS Client Settings

OAuth / OpenID Connect Code Expiration Policy

OAuth / OpenID Connect Access Token Expiration Policy

OAuth / OpenID Connect Refresh Token Expiration Policy

OAuth / OpenID Connect Device Token Expiration Policy

OpenID Connect ID Token Expiration Policy

OAuth / OpenID Connect Token Exchange Policy

Username Attribute Provider

Registered CAS applications are given the ability to allow for configuration of a username attribute provider, which controls what should be the designated user identifier that is returned to the application. The user identifier by default is the authenticated CAS principal id, and it optionally may be based off of an existing attribute that is available and resolved for the principal already.

Attribute Release Policy

The attribute release policy decides how attributes are selected and provided to a given application in the final CAS response. Additionally, each policy has the ability to apply an optional filter to weed out their attributes based on their values.

Multifactor Authentication Policy

Matching Strategy

Access Strategy

The access strategy of a registered service provides fine-grained control over the service authorization rules. It describes whether the service is allowed to use the CAS server, allowed to participate in single sign-on authentication, etc. Additionally, it may be configured to require a certain set of principal attributes that must exist before access can be granted to the service.

Authentication Policy

Properties

Contacts

You may assign contact information to this application. These are individual and/or entities that can be classified as owners of the application that may be notified in case changes are applied to the application.

Primary Contact
Secondary Contact
Other Contact

Public Key

Acceptable Usage Policy

Single Sign-on Participation Policy

Webflow Interrupt Policy

Passwordless Policy

Surrogate (Impersonation) Policy

_{The editor above shows the current state of the service definition as it is being built using the wizard.
While the chosen format is JSON, the actual format of the entry used when saving may differ based on your registry configuration.
This is merely a preview of the service definition being constructed and cannot be edited directly.}

History

ID	Date

ID	Service	URL

Editor

Wizard