Configuration Properties Changes

This page compares the CAS configuration catalog of this version with the catalog of the version before it, and lists the CAS settings that were added, removed, replaced by others or given a new default value. It is generated when the documentation is built, so it complements the release notes, which explain why things changed. Select a setting to see its description, type and module without leaving the page. The same list is published as JSON for scripts and tools, next to the configuration catalog.
{::nomarkdown}<div class="cas-settings-changes"> <ul class="cas-settings-changes-summary"> <li>136 added</li> <li>53 removed</li> <li>0 replaced</li> <li>82 new defaults</li> </ul> <p>Compared with 8.0.x. As JSON: settings-changes.json.</p>
<h2 id="added-settings">Added Settings</h2><h3>cas.audit</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.audit.redis.max-age</code><span class="cas-settings-changes-default">default <code>P180D</code></span><span class="cas-settings-changes-text">Indicates how long audit records should be kept in Redis.</span></li></ul><h3>cas.authn.attribute-repository.mapped</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.attribute-repository.mapped.id</code><span class="cas-settings-changes-text">A value can be assigned to this field to uniquely identify this resolver.</span></li><li><code class="cas-setting">cas.authn.attribute-repository.mapped.order</code><span class="cas-settings-changes-text">The order of this attribute repository in the chain of repositories.</span></li><li><code class="cas-setting">cas.authn.attribute-repository.mapped.people</code><span class="cas-settings-changes-text">Map of people and their attributes.</span></li><li><code class="cas-setting">cas.authn.attribute-repository.mapped.state</code><span class="cas-settings-changes-default">default <code>active</code></span><span class="cas-settings-changes-text">Whether attribute resolution based on this source is enabled.</span></li></ul><h3>cas.authn.mfa.web-authn</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.mfa.web-authn.core.hints</code><span class="cas-settings-changes-text">User-agent hints, in descending order of preference, sent with registration and authentication requests to guide the browser towards the kind of authenticator to offer first.</span></li><li><code class="cas-setting">cas.authn.mfa.web-authn.core.passkey-enroll-url</code><span class="cas-settings-changes-text">URL of the page where a user creates a passkey for the account, published as enroll in the passkey endpoints document at /.well-known/passkey-endpoints, so that password managers can send users straight to it.</span></li><li><code class="cas-setting">cas.authn.mfa.web-authn.core.passkey-manage-url</code><span class="cas-settings-changes-text">URL of the page where a user manages the account&#39;s passkeys, published as manage in the passkey endpoints document at /.well-known/passkey-endpoints.</span></li><li><code class="cas-setting">cas.authn.mfa.web-authn.core.passkey-upgrade-enabled</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Offer a passkey right after a password login: CAS shows a short page that asks the browser&#39;s password manager to create a passkey for the account on its own (WebAuthn conditional create), then continues as usual.</span></li></ul><h3>cas.authn.oauth</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oauth.core.allowed-resources</code><span class="cas-settings-changes-text">Resources, as regular expressions, that every OAuth client may request with the RFC 8707 resource parameter, in addition to those allowed by its registered service.</span></li></ul><h3>cas.authn.oidc.client-attestation</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.client-attestation.challenge.enabled</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Whether CAS hands out challenges at its challenge endpoint, advertised as challenge_endpoint, and requires the challenge claim of every client attestation proof of possession to carry one.</span></li><li><code class="cas-setting">cas.authn.oidc.client-attestation.challenge.time-to-live</code><span class="cas-settings-changes-default">default <code>PT5M</code></span><span class="cas-settings-changes-text">How long a challenge may be used.</span></li><li><code class="cas-setting">cas.authn.oidc.client-attestation.signing-alg-values-supported</code><span class="cas-settings-changes-text">Signing algorithms accepted for client attestations and their proofs of possession, advertised as client_attestation_signing_alg_values_supported and client_attestation_pop_signing_alg_values_supported.</span></li><li><code class="cas-setting">cas.authn.oidc.client-attestation.trust-anchors</code><span class="cas-settings-changes-text">Locations of PEM-encoded certificates of the trust anchors that client attestations must chain to, such as those of wallet providers.</span></li></ul><h3>cas.authn.oidc.core</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.core.pairwise-subject-salt</code><span class="cas-settings-changes-text">Salt used to calculate the pairwise subject identifiers of clients whose definition carries no salt of its own, such as clients that CAS registers itself, dynamically or through OpenID Federation, when they ask for pairwise subject ident...</span></li></ul><h3>cas.authn.oidc.discovery</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.discovery.token-endpoint-auth-signing-alg-values-supported</code><span class="cas-settings-changes-text">Signing algorithms supported by the token endpoint for the JWT that authenticates the client under the private_key_jwt and client_secret_jwt authentication methods.</span></li></ul><h3>cas.authn.oidc.dpop</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.dpop.nonce.enabled</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Whether DPoP proofs must carry a nonce that CAS handed out.</span></li><li><code class="cas-setting">cas.authn.oidc.dpop.nonce.time-to-live</code><span class="cas-settings-changes-default">default <code>PT5M</code></span><span class="cas-settings-changes-text">How long a nonce may be used.</span></li></ul><h3>cas.authn.oidc.federation</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.federation.issued-trust-marks</code><span class="cas-settings-changes-text">Trust marks this entity issues as a trust mark issuer, each type with the entities it is issued to.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.issued-trust-marks[].delegation</code><span class="cas-settings-changes-text">The delegation that allows this entity to issue trust marks of a type it does not own, a signed JWT obtained from the owner of the type, given as a resource such as a file or a URL, or the JWT itself.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.issued-trust-marks[].expiration</code><span class="cas-settings-changes-default">default <code>P30D</code></span><span class="cas-settings-changes-text">How long an issued trust mark is valid.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.issued-trust-marks[].logo-uri</code><span class="cas-settings-changes-text">URL of a logo for the trust mark, published as logo_uri.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.issued-trust-marks[].ref</code><span class="cas-settings-changes-text">URL of human-readable information about the issuance of the trust mark, published as ref.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.issued-trust-marks[].subjects</code><span class="cas-settings-changes-text">Entity identifiers of the entities this trust mark type is issued to.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.issued-trust-marks[].trust-mark-type</code><span class="cas-settings-changes-text">The trust mark type identifier of the trust marks issued.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.max-authority-hints</code><span class="cas-settings-changes-default">default <code>5</code></span><span class="cas-settings-changes-text">The maximum number of authority hints followed from any entity configuration while resolving the trust chains of a relying party that registers automatically.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.max-concurrent-resolutions</code><span class="cas-settings-changes-default">default <code>10</code></span><span class="cas-settings-changes-text">The maximum number of resolutions that run at the same time, for automatic registration and the resolve endpoint together.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.max-path-length</code><span class="cas-settings-changes-default">default <code>3</code></span><span class="cas-settings-changes-text">The maximum number of intermediate entities between a relying party that registers automatically and a trust anchor.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.max-requests-per-resolution</code><span class="cas-settings-changes-default">default <code>50</code></span><span class="cas-settings-changes-text">The maximum number of requests a single resolution may send: entity configurations, subordinate statements, historical keys and trust mark status requests, counted together across the trust chains of the entity and those of the issuers o...</span></li><li><code class="cas-setting">cas.authn.oidc.federation.required-trust-marks</code><span class="cas-settings-changes-text">Trust mark types that a relying party must hold to be registered automatically by this OpenID provider.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.resolution-timeout</code><span class="cas-settings-changes-default">default <code>PT10S</code></span><span class="cas-settings-changes-text">The longest time a single resolution may take, all of its requests together; every response is also limited in size.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.resolve-endpoint-authentication</code><span class="cas-settings-changes-default">default <code>none</code></span><span class="cas-settings-changes-text">Client authentication at the resolve endpoint of this entity as a trust anchor or intermediate.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.revocation.schedule.cron-expression</code><span class="cas-settings-changes-text">A cron-like expression, extending the usual UN*X definition to include triggers on the second, minute, hour, day of month, month, and day of week.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.revocation.schedule.cron-time-zone</code><span class="cas-settings-changes-text">A time zone for which the cron expression will be resolved.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.revocation.schedule.enabled</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">Whether scheduler should be enabled to schedule the job to run.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.revocation.schedule.enabled-on-host</code><span class="cas-settings-changes-default">default <code>.*</code></span><span class="cas-settings-changes-text">Overrides SchedulingProperties#enabled property value of true if this property does not match hostname of CAS server.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.revocation.schedule.repeat-interval</code><span class="cas-settings-changes-default">default <code>PT2M</code></span><span class="cas-settings-changes-text">String representation of a repeat interval of re-loading data for a data store implementation.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.revocation.schedule.start-delay</code><span class="cas-settings-changes-default">default <code>PT15S</code></span><span class="cas-settings-changes-text">String representation of a start delay of loading data for a data store implementation.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.rotation.schedule.cron-expression</code><span class="cas-settings-changes-text">A cron-like expression, extending the usual UN*X definition to include triggers on the second, minute, hour, day of month, month, and day of week.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.rotation.schedule.cron-time-zone</code><span class="cas-settings-changes-text">A time zone for which the cron expression will be resolved.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.rotation.schedule.enabled</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">Whether scheduler should be enabled to schedule the job to run.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.rotation.schedule.enabled-on-host</code><span class="cas-settings-changes-default">default <code>.*</code></span><span class="cas-settings-changes-text">Overrides SchedulingProperties#enabled property value of true if this property does not match hostname of CAS server.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.rotation.schedule.repeat-interval</code><span class="cas-settings-changes-default">default <code>PT2M</code></span><span class="cas-settings-changes-text">String representation of a repeat interval of re-loading data for a data store implementation.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.rotation.schedule.start-delay</code><span class="cas-settings-changes-default">default <code>PT15S</code></span><span class="cas-settings-changes-text">String representation of a start delay of loading data for a data store implementation.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-anchors</code><span class="cas-settings-changes-text">The trust anchors whose trust chains an OpenID provider accepts when relying parties register automatically, and that an intermediate resolves entities to at its resolve endpoint, with their keys obtained out of band.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-anchors[].entity-id</code><span class="cas-settings-changes-text">The entity identifier of the trust anchor.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-anchors[].jwks</code><span class="cas-settings-changes-text">The public keys of the trust anchor, obtained out of band, as a JSON web key set: a resource such as a file or a URL, or the JSON document itself.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-endpoint-authentication</code><span class="cas-settings-changes-default">default <code>none</code></span><span class="cas-settings-changes-text">Client authentication at the trust mark endpoint of this entity as a trust mark issuer.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-issuers</code><span class="cas-settings-changes-text">For a trust anchor, the trust mark types of the federation and the entities accepted as their issuers, published as trust_mark_issuers in its entity configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-issuers[].issuers</code><span class="cas-settings-changes-text">Entity identifiers of the entities accepted as issuers of trust marks of this type.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-issuers[].trust-mark-type</code><span class="cas-settings-changes-text">The trust mark type identifier.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-owners</code><span class="cas-settings-changes-text">For a trust anchor, the owners of trust mark types whose issuance is delegated to trust mark issuers, published as trust_mark_owners in its entity configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-owners[].jwks</code><span class="cas-settings-changes-text">The keys of the owner, with which delegations are verified, as a JSON web key set or a resource such as a file or a URL that holds one.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-owners[].owner</code><span class="cas-settings-changes-text">Entity identifier of the owner of the trust mark type, who delegates its issuance to trust mark issuers.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-mark-owners[].trust-mark-type</code><span class="cas-settings-changes-text">The trust mark type identifier.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.trust-marks</code><span class="cas-settings-changes-text">Trust marks issued to this entity, published in its entity configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.federation.unresolved-entity-retention</code><span class="cas-settings-changes-default">default <code>PT5M</code></span><span class="cas-settings-changes-text">How long an entity identifier whose trust chains could not be resolved is remembered.</span></li></ul><h3>cas.authn.oidc.id-token</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.id-token.collector-script.location</code><span class="cas-settings-changes-text">The location of the resource.</span></li></ul><h3>cas.authn.oidc.registration</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.registration.client-id-metadata-document.enabled</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Whether clients may use client ID metadata documents.</span></li><li><code class="cas-setting">cas.authn.oidc.registration.client-id-metadata-document.maximum-cache-duration</code><span class="cas-settings-changes-default">default <code>PT24H</code></span><span class="cas-settings-changes-text">The longest time a fetched document is used before CAS fetches it again, whatever its cache headers allow.</span></li><li><code class="cas-setting">cas.authn.oidc.registration.client-id-metadata-document.maximum-clients</code><span class="cas-settings-changes-default">default <code>1000</code></span><span class="cas-settings-changes-text">The maximum number of clients registered from client ID metadata documents.</span></li><li><code class="cas-setting">cas.authn.oidc.registration.client-id-metadata-document.minimum-cache-duration</code><span class="cas-settings-changes-default">default <code>PT5M</code></span><span class="cas-settings-changes-text">The shortest time a fetched document is used before CAS fetches it again, also used when the response carries no cache headers or forbids caching.</span></li><li><code class="cas-setting">cas.authn.oidc.registration.client-id-metadata-document.retention</code><span class="cas-settings-changes-default">default <code>P30D</code></span><span class="cas-settings-changes-text">How long a client stays registered after its document was last fetched successfully.</span></li><li><code class="cas-setting">cas.authn.oidc.registration.client-id-metadata-document.timeout</code><span class="cas-settings-changes-default">default <code>PT5S</code></span><span class="cas-settings-changes-text">Maximum time to wait for the document.</span></li></ul><h3>cas.authn.oidc.vc</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.oidc.vc.issuer.batch-size</code><span class="cas-settings-changes-default">default <code>10</code></span><span class="cas-settings-changes-text">Maximum number of credential requests accepted in a single batch.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].claims.[key].disclosable</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">A claim that is candidate for Selective Disclosure.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].claims.[key].display</code><span class="cas-settings-changes-text">Control display settings for this claim.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].claims.[key].display[].locale</code><span class="cas-settings-changes-default">default <code>en-US</code></span><span class="cas-settings-changes-text">Locale that controls this configuration&#39;s display.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].claims.[key].display[].name</code><span class="cas-settings-changes-text">Display name for this configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].claims.[key].mandatory</code><span class="cas-settings-changes-text">Whether this claim is mandatory.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].claims.[key].namespace</code><span class="cas-settings-changes-text">Name space of this claim in an ISO/IEC 18013-5 mdoc, such as org.iso.18013.5.1.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].credential-validity</code><span class="cas-settings-changes-default">default <code>P30D</code></span><span class="cas-settings-changes-text">Length of time for which a credential issued by this configuration remains valid.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].deferred-issuance</code><span class="cas-settings-changes-text">Whether credentials of this configuration are issued in a deferred manner.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].display</code><span class="cas-settings-changes-default">default <code>org.apereo.cas.configuration.model.support.oidc.OidcVerifiableCredentialConfigurationProperties$CredentialConfigurationDisplay@3af356f</code></span><span class="cas-settings-changes-text">Control display settings of this credential configuration used in metadata generation.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].display[].background-color</code><span class="cas-settings-changes-text">Background color for this configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].display[].description</code><span class="cas-settings-changes-default">default <code>My verifiable credential that belongs to my organization</code></span><span class="cas-settings-changes-text">Description for this configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].display[].locale</code><span class="cas-settings-changes-default">default <code>en-US</code></span><span class="cas-settings-changes-text">Locale that controls this configuration&#39;s display.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].display[].logo</code><span class="cas-settings-changes-default">default <code>https://apereo.github.io/cas/images/cas_logo.png</code></span><span class="cas-settings-changes-text">Logo url.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].display[].name</code><span class="cas-settings-changes-default">default <code>My Verifiable Credential</code></span><span class="cas-settings-changes-text">Display name for this configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].display[].text-color</code><span class="cas-settings-changes-text">Text color for this configuration.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].doctype</code><span class="cas-settings-changes-text">Document type of an ISO/IEC 18013-5 mdoc, required by the mso_mdoc format and ignored by the others, for example org.iso.18013.5.1.mDL for a mobile driving licence.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].key-attestations.key-storage</code><span class="cas-settings-changes-text">Attack potential resistance levels of the key storage this credential configuration accepts, such as iso_18045_high or iso_18045_moderate.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].key-attestations.required</code><span class="cas-settings-changes-text">Whether every proof for this credential configuration must come with a key attestation, either in the key_attestation header of a jwt proof or as an attestation proof.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.credential-configurations.[key].key-attestations.user-authentication</code><span class="cas-settings-changes-text">Attack potential resistance levels of user authentication this credential configuration accepts, such as iso_18045_high.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.deferred-issuance.interval</code><span class="cas-settings-changes-default">default <code>PT5M</code></span><span class="cas-settings-changes-text">How long a wallet should wait before asking for the credentials of a deferred transaction again, advertised as the interval of the credential response.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.deferred-issuance.time-to-live</code><span class="cas-settings-changes-default">default <code>P7D</code></span><span class="cas-settings-changes-text">How long a deferred transaction is kept.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.display</code><span class="cas-settings-changes-text">How wallets present this credential issuer, one entry per language.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.display[].locale</code><span class="cas-settings-changes-text">Language of this display, as a BCP 47 language tag such as en-US.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.display[].logo</code><span class="cas-settings-changes-text">URL of the credential issuer&#39;s logo.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.display[].logo-alt-text</code><span class="cas-settings-changes-text">Alternative text for the logo; defaults to the display name.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.display[].name</code><span class="cas-settings-changes-text">Display name of the credential issuer.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.encryption.alg-values-supported</code><span class="cas-settings-changes-text">JWE key management algorithms (alg) the issuer accepts in the key a wallet supplies for response encryption.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.encryption.enabled</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Whether the issuer metadata advertises credential_request_encryption and credential_response_encryption, and the credential endpoint accepts encrypted requests and encrypts responses when asked to.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.encryption.enc-values-supported</code><span class="cas-settings-changes-text">JWE content encryption algorithms (enc) accepted for encrypted requests and offered for encrypted responses.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.encryption.request-encryption-required</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Whether every credential request must be encrypted.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.encryption.response-encryption-required</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Whether every credential response must be encrypted, so that a wallet has to supply credential_response_encryption with each request.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.key-attestation.trust-anchors</code><span class="cas-settings-changes-text">Locations of PEM-encoded certificates of the trust anchors that key attestations must chain to, such as those of wallet providers.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.status-list.enabled</code><span class="cas-settings-changes-default">default <code>false</code></span><span class="cas-settings-changes-text">Whether issued SD-JWT VC credentials carry a status claim that points into a status list published by CAS.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.status-list.expiration</code><span class="cas-settings-changes-default">default <code>PT24H</code></span><span class="cas-settings-changes-text">How long a status list token is valid after it is issued, advertised as its exp claim.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.status-list.size</code><span class="cas-settings-changes-default">default <code>131072</code></span><span class="cas-settings-changes-text">Number of entries in each status list.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.issuer.status-list.time-to-live</code><span class="cas-settings-changes-default">default <code>PT10M</code></span><span class="cas-settings-changes-text">How long a verifier may cache a status list token before fetching it again, advertised as its ttl claim.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.metadata.include-claims</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">Whether claims should be included in the metadata.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.metadata.signed-metadata-expiration</code><span class="cas-settings-changes-default">default <code>P1D</code></span><span class="cas-settings-changes-text">How long signed credential issuer metadata, returned to wallets that ask for application/jwt, remains valid, advertised as its exp claim.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.offer.required-principal-attribute</code><span class="cas-settings-changes-text">The principal attribute that must be present in the authenticated principal for the offer to be valid.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.offer.required-principal-attribute-value</code><span class="cas-settings-changes-text">The value of the principal attribute that must be present in the authenticated principal for the offer to be valid.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.offer.transaction-code-enabled</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">Whether a transaction code should be attached to credential offers that use the pre-authorized code flow.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.presentation.client-identifier-prefix</code><span class="cas-settings-changes-default">default <code>REDIRECT_URI</code></span><span class="cas-settings-changes-text">How the wallet is expected to identify and authenticate CAS as the verifier, expressed as an OpenID4VP client identifier prefix.</span></li><li><code class="cas-setting">cas.authn.oidc.vc.presentation.response-mode</code><span class="cas-settings-changes-default">default <code>DIRECT_POST</code></span><span class="cas-settings-changes-text">How the wallet delivers its authorization response, expressed as an OpenID4VP response mode.</span></li></ul><h3>cas.authn.saml-idp.metadata</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.saml-idp.metadata.core.failure-cache-expiration</code><span class="cas-settings-changes-default">default <code>PT1M</code></span><span class="cas-settings-changes-text">How long a failure to load metadata for a service provider is remembered before the metadata source is consulted again.</span></li><li><code class="cas-setting">cas.authn.saml-idp.metadata.core.maximum-cache-duration</code><span class="cas-settings-changes-default">default <code>P1D</code></span><span class="cas-settings-changes-text">The longest time service provider metadata is cached when the metadata itself asks for a longer time with its cacheDuration.</span></li><li><code class="cas-setting">cas.authn.saml-idp.metadata.core.minimum-cache-duration</code><span class="cas-settings-changes-default">default <code>PT1M</code></span><span class="cas-settings-changes-text">The shortest time service provider metadata is cached when the metadata itself asks for a shorter time with its cacheDuration, so that metadata asking to be cached for no time at all is not loaded again on every request.</span></li><li><code class="cas-setting">cas.authn.saml-idp.metadata.file-system.change-detection-interval</code><span class="cas-settings-changes-default">default <code>PT5S</code></span><span class="cas-settings-changes-text">How often CAS may check whether service provider metadata kept in local files has changed.</span></li><li><code class="cas-setting">cas.authn.saml-idp.metadata.http.metadata-backup-max-age</code><span class="cas-settings-changes-default">default <code>P7D</code></span><span class="cas-settings-changes-text">How long a metadata backup file may go without being confirmed by its source before it is reported as stale.</span></li></ul><h3>cas.authn.throttle</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.authn.throttle.hazelcast.cluster.core.cluster-name</code><span class="cas-settings-changes-default">default <code>cas-hazelcast-cluster</code></span><span class="cas-settings-changes-text">Name of the Hazelcast cluster.</span></li></ul><h3>cas.heimdall</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.heimdall.jwt-assertion-max-lifetime</code><span class="cas-settings-changes-default">default <code>PT5M</code></span><span class="cas-settings-changes-text">Maximum lifetime of a JWT bearer assertion presented to Heimdall, measured between its iat and exp claims.</span></li></ul><h3>cas.mcp</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.mcp.oauth.operator-required-attributes</code><span class="cas-settings-changes-text">Principal attributes that the person behind an access token must have to be granted the MCP_OPERATOR role, which the tools that change CAS require, keyed by attribute name, with a regular expression as the value.</span></li><li><code class="cas-setting">cas.mcp.oauth.required-attributes</code><span class="cas-settings-changes-text">Principal attributes that the person behind an access token must have to be granted the MCP_ADMIN role, keyed by attribute name, with a regular expression as the value.</span></li></ul><h3>cas.service-registry</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.service-registry.amazon-s3.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.core.maximum-service-id-length</code><span class="cas-settings-changes-default">default <code>4096</code></span><span class="cas-settings-changes-text">Maximum length of a service identifier, such as the service parameter, that CAS will try to match against registered service definitions.</span></li><li><code class="cas-setting">cas.service-registry.dynamo-db.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.git.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.jpa.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.json.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.ldap.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.mongo.change-stream.enabled</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">Watch the service registry collection through a MongoDb change stream and reload service definitions as soon as they change, on every CAS node.</span></li><li><code class="cas-setting">cas.service-registry.mongo.change-stream.quiet-period</code><span class="cas-settings-changes-default">default <code>PT2S</code></span><span class="cas-settings-changes-text">How long to wait after the last observed change before reloading service definitions, so that a burst of changes, such as a bulk import, results in a single reload.</span></li><li><code class="cas-setting">cas.service-registry.mongo.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.redis.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.rest.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li><li><code class="cas-setting">cas.service-registry.stream.hazelcast.config.cluster.core.cluster-name</code><span class="cas-settings-changes-default">default <code>cas-hazelcast-cluster</code></span><span class="cas-settings-changes-text">Name of the Hazelcast cluster.</span></li><li><code class="cas-setting">cas.service-registry.yaml.order</code><span class="cas-settings-changes-text">The execution order of this registry which will determine its position in a chain in case multiple registries are defined.</span></li></ul><h3>cas.tgc</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.tgc.crypto.encryption-enabled</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">Whether crypto encryption operations are enabled.</span></li><li><code class="cas-setting">cas.tgc.crypto.signing-enabled</code><span class="cas-settings-changes-default">default <code>true</code></span><span class="cas-settings-changes-text">Whether crypto signing operations are enabled.</span></li></ul><h3>cas.ticket</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.ticket.registry.hazelcast.cluster.core.cluster-name</code><span class="cas-settings-changes-default">default <code>cas-hazelcast-cluster</code></span><span class="cas-settings-changes-text">Name of the Hazelcast cluster.</span></li><li><code class="cas-setting">cas.ticket.registry.in-memory.properties</code><span class="cas-settings-changes-text">Free-form key-value pairs to configure the specific registry with custom settings.</span></li></ul><h3>cas.webflow</h3>
<ul class="cas-settings-changes-list"><li><code class="cas-setting">cas.webflow.session.server.hazelcast.cluster.core.cluster-name</code><span class="cas-settings-changes-default">default <code>cas-hazelcast-cluster</code></span><span class="cas-settings-changes-text">Name of the Hazelcast cluster.</span></li></ul><h2 id="removed-settings">Removed Settings</h2>
<p>These settings are no longer recognized; remove them from your configuration, and check the release notes for what replaces them.</p><h3>cas.authn.oauth</h3>
<ul class="cas-settings-changes-list"><li><code>cas.authn.oauth.csrf-cookie.domain</code></li><li><code>cas.authn.oauth.csrf-cookie.http-only</code></li><li><code>cas.authn.oauth.csrf-cookie.max-age</code></li><li><code>cas.authn.oauth.csrf-cookie.name</code></li><li><code>cas.authn.oauth.csrf-cookie.path</code></li><li><code>cas.authn.oauth.csrf-cookie.same-site-policy</code></li><li><code>cas.authn.oauth.csrf-cookie.secure</code></li></ul><h3>cas.authn.throttle</h3>
<ul class="cas-settings-changes-list"><li><code>cas.authn.throttle.hazelcast.cluster.core.async-fillup</code></li><li><code>cas.authn.throttle.hazelcast.cluster.core.replicated</code></li><li><code>cas.authn.throttle.hazelcast.core.enable-jet</code></li></ul><h3>cas.service-registry</h3>
<ul class="cas-settings-changes-list"><li><code>cas.service-registry.cosmos-db.consistency-level</code></li><li><code>cas.service-registry.cosmos-db.container</code></li><li><code>cas.service-registry.cosmos-db.create-container</code></li><li><code>cas.service-registry.cosmos-db.database</code></li><li><code>cas.service-registry.cosmos-db.database-throughput</code></li><li><code>cas.service-registry.cosmos-db.endpoint-discovery-enabled</code></li><li><code>cas.service-registry.cosmos-db.indexing-mode</code></li><li><code>cas.service-registry.cosmos-db.key</code></li><li><code>cas.service-registry.cosmos-db.max-retry-attempts-on-throttled-requests</code></li><li><code>cas.service-registry.cosmos-db.max-retry-wait-time</code></li><li><code>cas.service-registry.cosmos-db.mode</code></li><li><code>cas.service-registry.cosmos-db.preferred-regions</code></li><li><code>cas.service-registry.cosmos-db.uri</code></li><li><code>cas.service-registry.cosmos-db.user-agent-suffix</code></li><li><code>cas.service-registry.stream.hazelcast.config.cluster.core.async-fillup</code></li><li><code>cas.service-registry.stream.hazelcast.config.cluster.core.replicated</code></li><li><code>cas.service-registry.stream.hazelcast.config.core.enable-jet</code></li></ul><h3>cas.ticket</h3>
<ul class="cas-settings-changes-list"><li><code>cas.ticket.registry.cosmos-db.consistency-level</code></li><li><code>cas.ticket.registry.cosmos-db.crypto.alg</code></li><li><code>cas.ticket.registry.cosmos-db.crypto.enabled</code></li><li><code>cas.ticket.registry.cosmos-db.crypto.encryption.key</code></li><li><code>cas.ticket.registry.cosmos-db.crypto.encryption.key-size</code></li><li><code>cas.ticket.registry.cosmos-db.crypto.signing-enabled</code></li><li><code>cas.ticket.registry.cosmos-db.crypto.signing.key</code></li><li><code>cas.ticket.registry.cosmos-db.crypto.signing.key-size</code></li><li><code>cas.ticket.registry.cosmos-db.database</code></li><li><code>cas.ticket.registry.cosmos-db.database-throughput</code></li><li><code>cas.ticket.registry.cosmos-db.endpoint-discovery-enabled</code></li><li><code>cas.ticket.registry.cosmos-db.indexing-mode</code></li><li><code>cas.ticket.registry.cosmos-db.key</code></li><li><code>cas.ticket.registry.cosmos-db.max-retry-attempts-on-throttled-requests</code></li><li><code>cas.ticket.registry.cosmos-db.max-retry-wait-time</code></li><li><code>cas.ticket.registry.cosmos-db.mode</code></li><li><code>cas.ticket.registry.cosmos-db.preferred-regions</code></li><li><code>cas.ticket.registry.cosmos-db.uri</code></li><li><code>cas.ticket.registry.cosmos-db.user-agent-suffix</code></li><li><code>cas.ticket.registry.hazelcast.cluster.core.async-fillup</code></li><li><code>cas.ticket.registry.hazelcast.cluster.core.replicated</code></li><li><code>cas.ticket.registry.hazelcast.core.enable-jet</code></li><li><code>cas.ticket.registry.stateless.storage-type</code></li></ul><h3>cas.webflow</h3>
<ul class="cas-settings-changes-list"><li><code>cas.webflow.session.server.hazelcast.cluster.core.async-fillup</code></li><li><code>cas.webflow.session.server.hazelcast.cluster.core.replicated</code></li><li><code>cas.webflow.session.server.hazelcast.core.enable-jet</code></li></ul><h2 id="replaced-settings">Replaced Settings</h2>
<p>These settings are deprecated in favor of another one; move to the replacement before the old name is removed.</p><p>No settings were replaced.</p><h2 id="changed-defaults">Changed Defaults</h2>
<p>The default value of these settings changed. If you relied on the previous default, set it explicitly.</p><table class="cas-settings-changes-defaults">
    <thead><tr><th>Setting</th><th>Before</th><th>Now</th></tr></thead>
    <tbody><tr><td><code class="cas-setting">cas.acceptable-usage-policy.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.acceptable-usage-policy.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.acceptable-usage-policy.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.acceptable-usage-policy.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.audit.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.audit.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.audit.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.audit.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.gauth.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.gauth.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.gauth.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.gauth.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.trusted.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.trusted.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.trusted.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.trusted.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.web-authn.core.trust-source.fido.metadata-blob-url</code></td><td><code>https://mds.fidoalliance.org/</code></td><td><code>https://mds3.fidoalliance.org/</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.web-authn.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.web-authn.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.web-authn.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.web-authn.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.yubikey.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.yubikey.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.yubikey.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.mfa.yubikey.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.oidc.jwks.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.oidc.jwks.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.oidc.jwks.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.oidc.jwks.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.pac4j.saml[].metadata.service-provider.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.pac4j.saml[].metadata.service-provider.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.pac4j.saml[].metadata.service-provider.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.pac4j.saml[].metadata.service-provider.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.accounts.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.accounts.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.accounts.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.accounts.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.tokens.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.tokens.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.tokens.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.passwordless.tokens.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.saml-idp.metadata.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.authn.saml-idp.metadata.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.authn.saml-idp.metadata.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.authn.saml-idp.metadata.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.authn.throttle.hazelcast.cluster.core.eviction-policy</code></td><td><code>LRU</code></td><td><code>NONE</code></td></tr><tr><td><code class="cas-setting">cas.authn.throttle.hazelcast.cluster.core.map-merge-policy</code></td><td><code>PUT_IF_ABSENT</code></td><td><code>LATEST_UPDATE</code></td></tr><tr><td><code class="cas-setting">cas.consent.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.consent.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.consent.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.consent.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.events.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.events.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.events.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.events.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.javers.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.javers.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.javers.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.javers.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.monitor.mongo[].pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.monitor.mongo[].pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.monitor.mongo[].pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.monitor.mongo[].pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.service-registry.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.service-registry.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.service-registry.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.service-registry.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.service-registry.stream.hazelcast.config.cluster.core.eviction-policy</code></td><td><code>LRU</code></td><td><code>NONE</code></td></tr><tr><td><code class="cas-setting">cas.service-registry.stream.hazelcast.config.cluster.core.map-merge-policy</code></td><td><code>PUT_IF_ABSENT</code></td><td><code>LATEST_UPDATE</code></td></tr><tr><td><code class="cas-setting">cas.ticket.registry.hazelcast.cluster.core.eviction-policy</code></td><td><code>LRU</code></td><td><code>NONE</code></td></tr><tr><td><code class="cas-setting">cas.ticket.registry.hazelcast.cluster.core.map-merge-policy</code></td><td><code>PUT_IF_ABSENT</code></td><td><code>LATEST_UPDATE</code></td></tr><tr><td><code class="cas-setting">cas.ticket.registry.mongo.pool.idle-time</code></td><td><code>PT30S</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.ticket.registry.mongo.pool.life-time</code></td><td><code>PT60S</code></td><td><code>PT30M</code></td></tr><tr><td><code class="cas-setting">cas.ticket.registry.mongo.pool.max-size</code></td><td><code>10</code></td><td><code>100</code></td></tr><tr><td><code class="cas-setting">cas.ticket.registry.mongo.pool.max-wait-time</code></td><td><code>PT60S</code></td><td><code>PT10S</code></td></tr><tr><td><code class="cas-setting">cas.ticket.tst.time-to-kill-in-seconds</code></td><td><code>PT15M</code></td><td><code>PT5M</code></td></tr><tr><td><code class="cas-setting">cas.webflow.session.server.hazelcast.cluster.core.eviction-policy</code></td><td><code>LRU</code></td><td><code>NONE</code></td></tr><tr><td><code class="cas-setting">cas.webflow.session.server.hazelcast.cluster.core.map-merge-policy</code></td><td><code>PUT_IF_ABSENT</code></td><td><code>LATEST_UPDATE</code></td></tr></tbody>
</table></div>{:/nomarkdown}