It's necessary to explicitly state that CAS should be used as an authentication backend.