SAS9.4M9, Web App and SAML

[Eddie305]

Anyone has experience in configuring SAS9.4M9 and SAML? 

We tried to integrate with Shibboleth but encountered errors "sasadm@saspw" is not unauthorized. I am suspecting that related to the upgrade of Apache CAS in M9.

2026-05-11 09:57:23,014 [tomcat-http--2] INFO  org.apereo.cas.authentication.DefaultAuthenticationManager - Authenticated principal [sasadm@saspw] with attributes [{clearpass.key=[c9be56fe-9c23-43c5-8c46-8c0cc0256b2c], isUnrestricted=[false], person=[sasadm], principal=[sasadm@saspw]}] via credentials [[UsernamePasswordCredential(username=sasadm@saspw, source=null, customFields={})]].

2026-05-11 09:57:23,015 [tomcat-http--50] INFO  org.apereo.cas.authentication.DefaultAuthenticationManager - Authenticated principal [sasadm@saspw] with attributes [{clearpass.key=[6501ec44-7a3b-441a-ac4b-acfdb1f7617c], isUnrestricted=[false], person=[sasadm], principal=[sasadm@saspw]}] via credentials [[UsernamePasswordCredential(username=sasadm@saspw, source=null, customFields={})]].

2026-05-11 09:57:23,057 [tomcat-http--3] ERROR org.apereo.cas.web.support.filters.AbstractSecurityFilter - Unauthorized

UnauthorizedServiceException.java:denied:60

RegisteredServiceAccessStrategyAuditableEnforcer.java:lambda$execute$6:200

Optional.java:orElseGet:364

Anyone know if there is a difference and how to find out a solution?