CAS is used to verify your identity. It confirms that you are the person associated with the credentials you provided. You can use CAS to log in to services if you belong to any of the following categories:
- Active employees and students
- Admitted students
- Affiliates
- Collaboration Guests
- Members of the Alumni Association
- Any of the above after their affiliation has expired but while they are still in the grace period. Grace Periods vary depending on the affiliation(s) of the person.
If an application wishes to exclude any of these categories, it must include authorization as part of its processing.
Authorization asserts that the individual is allowed to access certain system or application resources. This can be done based on data found, for example, in the CalNet Directory using LDAP, or by using information stored locally for use by a particular application.