This AuthenticationProvider is capable of validating UsernamePasswordAuthenticationToken requests which contain a principal name equal to either CasProcessingFilter.CAS_STATEFUL_IDENTIFIER or CasProcessingFilter.CAS_STATELESS_IDENTIFIER .
AuthenticationProvider
principal
Authentication
UserDetails
CAS does not provide the authorities (roles) granted to a user.
CAS 1.0 allowed services to receive a service ticket and then validate it. CAS 2.0 allows services to receive a service ticket and then validate it with a proxy callback URL.
When a service ticket or proxy ticket is validated against the CAS server, it is unable to be used again.
Implementations must accept CAS proxy tickets, in addition to CAS service tickets.