title: CAS Authentication and Authorization Best Practice
body: <p>I have installed and configured my CAS to use LDAP for authenticating 100 over applications. I read in a few other answers about getting the authorization attributes from a different source like DB. However, I don't want to use LDAP grouping for authorization.</p>
  
  <p>My question is what is the <strong>best practice</strong> to implement an <strong>authorization system</strong> that is easy to use and configure(simply with GUI) for admin and CAS? 
  Also, I want to use the authorization system for centralized management on all my applications grants and permissions.</p>
  
  <p>Image: 
  <a href="https://i.stack.imgur.com/DCArE.png" rel="nofollow noreferrer">Just for resolution</a></p>