https://technotes.khitrenovich.com/cas-3-5-1-saml-2-0-identity-provider/
Why you should not use CAS 3.5.1 as SAML 2.0 Identity Provider