CWRU Apereo CAS single sign-on (login.case.edu)
CWRU runs an Apereo CAS deployment at login.case.edu as its campus single sign-on service. The CAS 3.0 protocol validation endpoint /cas/p3/serviceValidate answers unauthenticated with a well-formed cas:serviceResponse in the http://www.yale.edu/tp/cas namespace. It is an institution-operated authentication service on the institution's own domain, not a data API: a valid service ticket is required for any substantive response, and there is no public client registration. The CAS OIDC module is deployed but refuses unauthenticated discovery (/cas/oidc/.well-known/openid-configuration returns 401).