High-level CAS authentication flow