How To Use

User Management

Create, manage, and configure user accounts, roles, and permissions.

1. User Roles

CAS supports two user roles with different access levels:

Admin

  • Access admin dashboard
  • Manage client systems
  • Create / edit / delete users
  • View audit logs
  • Manage IP whitelists
  • Regenerate credentials

User

  • Access user portal
  • View own profile
  • Update personal information
  • Enable / disable 2FA
  • Change password
  • SSO into client apps

2. Creating Users (Admin Panel)

Navigate to Admin → Users → Add User.

Field Required Validation
Name2-255 characters
EmailValid email, unique
PasswordMin 8 characters
Roleadmin or user

3. Creating Users via API

Register users programmatically through the REST API:

POST /api/register 
curl -X POST https://your-cas-server.com/api/register \
  -H "Content-Type: application/json" \
  -d '{
    "name": "John Doe",
    "email": "[email protected]",
    "password": "secure_password_123",
    "password_confirmation": "secure_password_123"
  }'
Success Response
{
  "success": true,
  "user": {
    "id": 42,
    "name": "John Doe",
    "email": "[email protected]",
    "role": "user"
  }
}

4. User Self-Service Portal

Regular users can manage their own accounts at /user/dashboard:

Profile

Update name, email, and profile picture

Password

Change password with current password confirmation

Two-Factor Auth

Enable/disable TOTP-based 2FA with QR code setup

Login History

View recent login activity, IP addresses, and devices

5. Account Lockout & Recovery

Auto-Lock

After 5 failed login attempts, the account is locked for 30 minutes. The user sees time remaining.

Admin Unlock

Admins can manually unlock accounts from Admin → Users → Unlock.

Password Reset

Users can reset their password via email at /auth/forgot-password.