<security-domain name="casclient">
                    <authentication>
                        <login-module code="org.jasig.cas.client.jaas.CasLoginModule" flag="required">
                            <module-option name="ticketValidatorClass" value="org.jasig.cas.client.validation.Cas20ServiceTicketValidator"/>
                            <module-option name="casServerUrlPrefix" value="https://castst.nwu.ac.za:8443/cas"/>
                            <module-option name="tolerance" value="20000"/>
                            <module-option name="defaultRoles" value="user"/>
                            <module-option name="roleAttributeNames" value="authorities"/>
                            <module-option name="principalGroupName" value="CallerPrincipal"/>
                            <module-option name="roleGroupName" value="Roles"/>
                            <module-option name="cacheAssertions" value="true"/>
                            <module-option name="cacheTimeout" value="480"/>
                        </login-module>
                    </authentication>
                </security-domain>