Mohamed, You may need to add
management.endpoint.registeredServices.access= There was a property naming change, https://apereo.github.io/cas/7.2.x/release_notes/RC2.html#actuator-endpoints You can see it by expanding the GET description of registeredServices and clicking on the book icon, then select the Configuration tab, https://apereo.github.io/cas/7.3.x/services/Service-Management.html Ray ________________________________ From: [email protected] <[email protected]> on behalf of Mohamed Iheb JEMAI <[email protected]> Sent: May 4, 2026 01:27 To: CAS Community <[email protected]> Subject: [cas-user] CAS 7.3.5 Migration - 403 Forbidden when accessing service registry You don't often get email from [email protected]. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification> Hello, I’m currently migrating a CAS server from version 6.6.15 to 7.3.5. In CAS 6.6.15, we were using actuator endpoints to: - list registered services via: /cas/actuator/registeredServices - import services via: POST /cas/actuator/registeredServices/import This was working fine with basic properties configuration. After upgrading to CAS 7.3.5, I’m facing a consistent HTTP 403 (Forbidden) on: /cas/actuator/registeredServices Context: - Spring Boot 3 / Spring Security 6 - Using basic auth with: spring.security.user.name spring.security.user.password spring.security.user.roles=ACTUATOR Configuration includes: - management.endpoints.web.exposure.include=* - cas.monitor.endpoints.endpoint.defaults.access=PERMIT - cas.monitor.endpoints.endpoint.registeredServices.access=PERMIT Despite that: - Browser access → 403 - curl with -u → 403 Questions: 1. Is access to /actuator/registeredServices now restricted by default in CAS 7? 2. Is additional Spring Security configuration required (beyond properties)? 3. Is the import endpoint still supported in CAS 7.3.5? Thanks in advance for your help. -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/731049ff-becd-42ed-bcc5-6ae5cff88b83n%40apereo.org<https://groups.google.com/a/apereo.org/d/msgid/cas-user/731049ff-becd-42ed-bcc5-6ae5cff88b83n%40apereo.org?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/YQBP288MB0081DB07F66FDA25E2A06802CE312%40YQBP288MB0081.CANP288.PROD.OUTLOOK.COM.
