There have been multiple cases where provided the credential to CAS was correct but authentication fails. The CAS was logging the issue on principle cannot be null. After checking the user account’s returned LDAP attributes and values the problem has been found.
The CAS is expecting “cn” to be equal to sAMAccountname, however, there are some students that their “cn” is equal to their name. That is an exception which cannot be handled by CAS. In case of similar issues please do check the cn.
The issue is where the account “CN” is not equal to the student ID.
