====================================================================== Set a few required parameters in your Apache configuration: CASCookiePath /var/cache/apache2/mod_auth_cas/ CASLoginURL https://login.example.org/cas/login CASValidateURL https://login.example.org/cas/serviceValidate Protect a "Location" or "Directory" block in your Apache configuration: Authtype CAS require valid-user If SAML-delivered attribute authorization is also desired, use the samlValidate URL, enable SAML validation, and specify cas-attribute in your require rule (please note: both attribute name and value are case-sensitive): CASCookiePath /var/cache/apache2/mod_auth_cas/ CASLoginURL https://login.example.org/cas/login CASValidateURL https://login.example.org/cas/samlValidate CASValidateSAML On Authtype CAS require cas-attribute edupersonaffiliation:staff For more informations see: https://wiki.jasig.org/display/CASC/mod_auth_cas ======================================================================