I have followed this guide to enable CAS: https://gluu.org/docs/gluu-server/admin-guide/cas/ Problem is we're getting a 404 when being redirected from an apache2 web server with cas_auth configured exactly the same as to our current standalone CAS (except url obv.) I cannot find any log entries related to the auth attempts? We also noticed that `/opt/shibboleth-idp/conf/cas-protocol.xml `have example.org bean classes configured for some reason? It keeps getting rebuilt with those two URL:s every restart: ``` <bean class="net.shibboleth.idp.cas.service.ServiceDefinition" c:regex="https://([A-Za-z0-9_-]+\.)*example\.org(:\d+)?/.*" p:group="proxying-services" p:authorizedToProxy="true" p:singleLogoutParticipant="true" /> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition" c:regex="https://([A-Za-z0-9_-]+\.)*example\.org(:\d+)?/.*" p:group="non-proxying-services" p:authorizedToProxy="false" /> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition" c:regex="https:\/\/([A-Za-z0-9_-]+\.)*oru\.se(:\d+)?\/.*" p:group="non-proxying-services" p:authorizedToProxy="false" /> ``` cas-protocol.xml.vm: ``` #if ($casParams.enabled) <bean class="net.shibboleth.idp.cas.service.ServiceDefinition" c:regex="$casParams.authorizedToProxyPattern" p:group="proxying-services" p:authorizedToProxy="true" p:singleLogoutParticipant="true" /> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition" c:regex="$casParams.unauthorizedToProxyPattern" p:group="non-proxying-services" p:authorizedToProxy="false" /> <bean class="net.shibboleth.idp.cas.service.ServiceDefinition" c:regex="https:\/\/([A-Za-z0-9_-]+\.)*oru\.se(:\d+)?\/.*" p:group="non-proxying-services" p:authorizedToProxy="false" /> ``` Am I understanding the regex change correctly by changing from `c:regex="https:\/\/cas\.gluu\.org\/example_simple\.php"` to `c:regex="https:\/\/([A-Za-z0-9_-]+\.)*oru\.se(:\d+)?\/.*"`? We only want hosts named something.oru.se allowed. attribute-filter.xml.vm: ``` <AttributeFilterPolicy id="ManualCASFilterRule1"> <PolicyRequirementRule xsi:type="RequesterRegex" regex="^https:\/\/([A-Za-z0-9_-]+\.)*oru\.se(:\d+)?\/.*$" /> <AttributeRule attributeID="mail"> <PermitValueRule xsi:type="ANY" /> </AttributeRule> ``` Thanks in advance.