I had to jump through a few hoops to be able to override the settings. Unfortunately, the Error is defined as an Enum and the AD resolver doesn't allow me to plug in a custom extension of the AD state to override a number of cases in order to throw CAS specific exceptions. 

We should keep an eye on ldaptive to see if this behavior can be improved later.