localhost

Location of CAS authentication service.

443 is the standard ssl port. 8443 is the standard non-root port for Tomcat.

If CAS is not at the root of the host, include a URI (e.g., /cas).

With client version 0.6 or greater this is the certificate for validating cas or the cas CA as appropriate.

In most cases, the answer will be no; an LDAP repository will be the source of CAS users. But in some cases, the Drupal user database could be used as the central user store for single sign-on. If this is the case, select this option.

If you have pre-created regular accounts in cas that you want converted to mapped accounts, check this box. Otherwise CAS will likely throw duplicate key violation errors on new users.

If a CAS user logs in, his Drupal account will automatically be created. If you don't check this option, you will have to pre-create accounts for the users you want to allow.

Append this domain name to each new user in order generate his email address.

Hide email address field on the edit user form.

Hide password field on the edit user form.

This value can be used to establish a role automatically for all CAS users. As an example, if you are also using the simple_ldap module, you can use this role to establish a tie between CAS and LDAP-populated data. i.e. Users with the role of 'cas:user' should have their LDAP data updated automatically.

Enter one page per line as Drupal paths. The '*' character is a wildcard. Example paths are 'blog' for the blog page and 'blog/*' for every personal blog. '<front>' is the front page.

Activate this option if you want a user to be directed to the following page after their first CAS login.

Drupal path or URL. An example path is 'blog' for the blog page. '<front>' is the front page. An example URL is 'http://www.example.com'.

The message displayed to a user when he successfully logs in via CAS. You may specify '%cas_username', the username of the user.

Activate this option if you want a user to be directed to the following page after logging out of CAS. The logout destination must be specified below.

URL. An example URL is 'http://www.example.com'.

The URL users should use for changing their password. Leave blank to use the standard Drupal page.

The URL users should use for changing registering. Leave blank to use the standard Drupal page.

Activate this option if you want to extract the user email from an LDAP directory. Ldapauth module must be enabled and configured.

LDAP entry attribute containing the email address.

Activate this option if you want to extract the user groups from an LDAP directory. Ldapgroups module must be enabled and configured.