<http auto-config='false' disable-url-rewriting="true" entry-point-ref="casProcessingFilterEntryPoint"
		access-decision-manager-ref="accessDecisionManager" use-expressions="true">
		<session-management session-authentication-strategy-ref="sas"/>
		<custom-filter ref="concurrencyFilter" position="CONCURRENT_SESSION_FILTER" />
		<custom-filter ref="casFilter" position="CAS_FILTER" />
		<logout />
	</http>
	<context:property-placeholder location="classpath:${env}.properties" />
	<authentication-manager alias="authenticationManager">
		<authentication-provider ref="casAuthenticationProvider" />
	</authentication-manager>

	<beans:bean id="userDetailsService" class="customJdbcStuff">
		<beans:property name="dataSource" ref="transactionAwareDataSource" />
		<beans:property name="usersByUsernameQuery"
			value="customStuff" />

		<beans:property name="rolePrefix" value="" />
		<beans:property name="enableGroups" value="true" />
	</beans:bean>

	<beans:bean id="casFilter" class="org.springframework.security.cas.web.CasAuthenticationFilter">
		<beans:property name="proxyGrantingTicketStorage" ref="proxyGrantingTicketStorage" />
		<beans:property name="proxyReceptorUrl" value="/secure/receptor" />
		<beans:property name="filterProcessesUrl" value="/j_spring_cas_security_check" />
		<beans:property name="authenticationManager" ref="authenticationManager" />
		<beans:property name="sessionAuthenticationStrategy" ref="sas" />
		<beans:property name="authenticationFailureHandler" ref="authenticationFailureHandler" />
		<beans:property name="authenticationSuccessHandler" ref="authenticationSuccessHandler" />
	</beans:bean>

	<beans:bean id="casProcessingFilterEntryPoint" class="org.springframework.security.cas.web.CasAuthenticationEntryPoint">
		<beans:property name="loginUrl" value="${cas.server}/cas/login" />
		<beans:property name="serviceProperties" ref="serviceProperties" />
		<beans:property name="encodeServiceUrlWithSessionId" value="false" />
	</beans:bean>

	<beans:bean id="serviceProperties" class="org.springframework.security.cas.ServiceProperties">
		<beans:property name="service" value="${host.name}/j_spring_cas_security_check" />
		<beans:property name="sendRenew" value="false" />
	</beans:bean>

	<beans:bean id="casAuthenticationProvider" class="org.springframework.security.cas.authentication.CasAuthenticationProvider">
		<beans:property name="userDetailsService" ref="userDetailsService" />
		<beans:property name="serviceProperties" ref="serviceProperties" />
		<beans:property name="ticketValidator">
			<beans:bean class="customStuff"/>
		</beans:property>
		<beans:property name="key" value="somethingSpecial" />
	</beans:bean>

	<beans:bean id="proxyGrantingTicketStorage" class="org.jasig.cas.client.proxy.ProxyGrantingTicketStorageImpl" />

	<beans:bean id="concurrencyFilter" class="org.springframework.security.web.session.ConcurrentSessionFilter">
		<beans:property name="sessionRegistry" ref="sessionRegistry" />
		<beans:property name="expiredUrl" value="/concurrentUser.jsp" />
	</beans:bean>

	<beans:bean id="sas" class="org.springframework.security.web.authentication.session.ConcurrentSessionControlStrategy">
		<beans:constructor-arg name="sessionRegistry" ref="sessionRegistry" />
		<beans:property name="maximumSessions" value="1" />
	</beans:bean>