Features of CAS: No Application Pre-Registration No Required Shared Secrets No Public Key Infrastructure Prerequisite No Need to Track Application's Security Profile Applications Never Touch User Credentials CAS Doesn't Impose Session Behavior on Applications. uPortal Service Provider Available