For some reason I'm not able to log in to Netbox, instead I get a (for some reason unstyled) "Application Not Authorized to Use CAS" error page:
The CAS logs are not much more helpful, either:
2024-08-30 16:45:19,972 WARN [org.apereo.cas.services.RegisteredServiceAccessStrategyUtils] - <Cannot grant access to service [netbox_oidc]; it is not authorized for use by [Majavah].> 2024-08-30 16:45:19,974 ERROR [org.apereo.cas.support.oauth.web.endpoints.OAuth20AuthorizeEndpointController] - <Cannot grant service access netbox_oidc to Majavah RegisteredServiceAccessStrategyUtils.java:ensurePrincipalAccessIsAllowedForService:149 RegisteredServiceAccessStrategyAuditableEnforcer.java:byServiceAndRegisteredServiceAndPrincipal:148 RegisteredServiceAccessStrategyAuditableEnforcer.java:lambda$execute$2:190 >
The main page at https://idp.wikimedia.org/login does list cn=nda,ou=groups,dc=wikimedia,dc=org in memberOf so I should have the right permissions.