Hm, on a casual read of this, I think that if params[:service] isn't present, it will pass just "/dashboard" to CAS. That won't be enough for CAS -- it needs the fully qualified hostname and protocol too: https://calcentral.berkeley.edu/dashboard etc.