The info endpoint on my local (v 8.0.1.2), unfortunately, displays the multitenancy package instead of anything else; repeated 127 times, and we are not using it. I did check in my WEB-INF/lib/ and the packages are there.
Perhaps that jar is corrupt. SamlRegisteredService is in cas-server-support-saml-idp-core package. Ray ________________________________ From: [email protected] <[email protected]> on behalf of Baron Fujimoto <[email protected]> Sent: October 15, 2026 13:11 To: [email protected] <[email protected]> Subject: Re: [cas-user] SAML service registration error Hmm, I don't think we're doing anything significantly different. We also have the following in our build.gradle overlay file to enable SAML: implementation "org.apereo.cas:cas-server-support-saml-idp" I'm assuming that cas-server-support-saml-core and cas-server-support-saml-core-api show up in the output of /info as a result of that? Our service registration looks like: { "@class" : "org.apereo.cas.support.saml.services.SamlRegisteredService", "name" : "ITS_Shibboleth_SAML2_Proxy", "serviceId" : "^https://idp-dev\\.its\\.hawaii\\.edu/shibboelth";, "description" : "ITS Shibboleth SAML2 Proxy", "metadataLocation" : "https://idp-dev.its.hawaii.edu/shibboleth_sp-metadata.xml";, "id" : 20260831140225, "evaluationOrder" : 10000011, "multifactorPolicy" : { "@class" : "org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy", "multifactorAuthenticationProviders" : [ "java.util.LinkedHashSet", [ "mfa-duo" ] ], "failureMode" : "OPEN" }, "attributeReleasePolicy" : { "@class" : "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" } } The problem is that for some reason CAS is apparently not recognizing the service registration class "org.apereo.cas.support.saml.services.SamlRegisteredService" → "no such class found". So I think it's not even getting to the point of evaluating the serviceId, metadata, or any of the other elements of the service registration. On Thu, Oct 15, 2026 at 7:33 AM 'Ray Bon' via CAS Community <[email protected]<mailto:[email protected]>> wrote: Baron, This is my simplified service for local testing. { "@class": "org.apereo.cas.support.saml.services.SamlRegisteredService", "serviceId": "https://idplocal.uvic.ca/idp/shibboleth<https://urldefense.com/v3/__https://idplocal.uvic.ca/idp/shibboleth__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bS6S1heU$>", "name": "Shibboleth", "id": 10016, "description": "Shibboleth as SP", "evaluationOrder": 124, "attributeReleasePolicy": { "@class": "org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy", "allowedAttributes": ["java.util.ArrayList", ["uid"]] }, "metadataLocation": "https://idplocal.uvic.ca/idp/shibboleth<https://urldefense.com/v3/__https://idplocal.uvic.ca/idp/shibboleth__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bS6S1heU$>", "requireSignedRoot": "false", "encryptAssertions": "false" } Make sure the serviceId regex matches the entityID in the metadata. We use an exact match, i.e. different service definitions for each tier. I have the following in build.gradle org.apereo.cas:cas-server-support-saml-idp But I do not have '...core' nor '...core-api'. Ray ________________________________ From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> on behalf of Baron Fujimoto <[email protected]<mailto:[email protected]>> Sent: October 14, 2026 19:09 To: CAS Community <[email protected]<mailto:[email protected]>> Subject: [cas-user] SAML service registration error I am trying to configure our Shibboleth IdPas a proxy using Apereo CAS as an external authentication IdP using their native SAML features to replace the deprecated Unicon shib-cas-authn plugin that currently serves this role. I have used this reference as guide on the CAS side to enabled the CAS SAML support module: <https://apereo.github.io/cas/development/authentication/Configuring-SAML2-Authentication.html<https://urldefense.com/v3/__https://apereo.github.io/cas/development/authentication/Configuring-SAML2-Authentication.html__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bTRkgP8e$>> I believe it has been deployed successfully because I find the following in the output from /cas/actuator/info: { "name": "cas-server-support-saml", "version": "7.3.8.3", "description": "Apereo CAS SAML Server and Validation Support" }, { "name": "cas-server-support-saml-core", "version": "7.3.8.3", "description": "Apereo CAS SAML Core/Common Functionality" }, { "name": "cas-server-support-saml-core-api", "version": "7.3.8.3", "description": "Apereo CAS SAML Core Functionality" }, I have created a service registration for our proxying Shibboleth IdP based off of this CAS reference: <https://apereo.github.io/cas/development/services/SAML2-Service-Management.html<https://urldefense.com/v3/__https://apereo.github.io/cas/development/services/SAML2-Service-Management.html__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bVb7Rsih$>> However, when I place the service registration in our usual directory for registered services, the following error is logged: ERROR [org.apereo.cas.util.serialization.BaseJacksonSerializer] - <Cannot read/parse [{"@class":"org.apereo.cas.support.saml.services.SamlRegisteredService","name":"ITS_Shibboleth_SAML2_Proxy","serviceId":"^h...] to deserialize into type [interface org.apereo.cas. services.RegisteredService]. This may be caused in the absence of a configuration/support module that knows how to interpret the fragment, specially if the fragment describes a CAS registered service definition. Internal parsing error is [Could not resolve type id 'org.apereo.cas.support .saml.services.SamlRegisteredService' as a subtype of `org.apereo.cas.services.RegisteredService`: no such class found at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 11]]> DEBUG [org.apereo.cas.util.serialization.BaseJacksonSerializer] - <Could not resolve type id 'org.apereo.cas.support.saml.services.SamlRegisteredService' as a subtype of `org.apereo.cas.services.RegisteredService`: no such class found at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` disabled); line: 1, column: 11]> I'm not sure why it's choking on the class "org.apereo.cas.support.saml.services.SamlRegisteredService" or how to best troubleshoot and resolve this. Any suggestions would be appreciated. -- Baron Fujimoto <[email protected]<mailto:[email protected]>> ::: UH Information Technology Services minutas cantorum, minutas balorum, minutas carboratum descendus pantorum -- - Website: https://apereo.github.io/cas<https://urldefense.com/v3/__https://apereo.github.io/cas__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bQPeT_td$> - List Guidelines: https://goo.gl/1VRrw7<https://urldefense.com/v3/__https://goo.gl/1VRrw7__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bZdBkaSN$> - Contributions: https://goo.gl/mh7qDG<https://urldefense.com/v3/__https://goo.gl/mh7qDG__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bUSeHvm8$> --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL2vUxgLZuNLwB9mxMR%2BqiBpnSXpx1ONAkiSKWC1kaB8cw%40mail.gmail.com<https://urldefense.com/v3/__https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL2vUxgLZuNLwB9mxMR*2BqiBpnSXpx1ONAkiSKWC1kaB8cw*40mail.gmail.com?utm_medium=email&utm_source=footer__;JSU!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bRjYNqCY$>. -- - Website: https://apereo.github.io/cas<https://urldefense.com/v3/__https://apereo.github.io/cas__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bQPeT_td$> - List Guidelines: https://goo.gl/1VRrw7<https://urldefense.com/v3/__https://goo.gl/1VRrw7__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bZdBkaSN$> - Contributions: https://goo.gl/mh7qDG<https://urldefense.com/v3/__https://goo.gl/mh7qDG__;!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bUSeHvm8$> --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/YTZP288MB1046C93D47DAA84AC5D67770CE9C2%40YTZP288MB1046.CANP288.PROD.OUTLOOK.COM<https://urldefense.com/v3/__https://groups.google.com/a/apereo.org/d/msgid/cas-user/YTZP288MB1046C93D47DAA84AC5D67770CE9C2*40YTZP288MB1046.CANP288.PROD.OUTLOOK.COM?utm_medium=email&utm_source=footer__;JQ!!PvDODwlR4mBZyAb0!XaQniwk8GHqWXGoJQcxF0PiUM4yzZZ3lwRXv_9seJoRKZJht2uz194L0Hpc3UglqJYwiTJu9bURiGYPm$>. -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL0FYNwjVvj6qPH0Wzb7aDMx2cbrqjR96BgSb%2ByBqS1G0g%40mail.gmail.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL0FYNwjVvj6qPH0Wzb7aDMx2cbrqjR96BgSb%2ByBqS1G0g%40mail.gmail.com?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/YTZP288MB104650A894A2192D0CD128CBCE9C2%40YTZP288MB1046.CANP288.PROD.OUTLOOK.COM.
