...
While this works in production, having to code the server names into the CAS proxy callback URL doesn't seem ideal. It has been suggested that client certificates could solve this problem by eliminating the need for mutual authentication via https callbacks. Rutgers (and the CAS discussion list!) welcome thoughts about this.
Unlicensed user William G. Thompson, Jr. is the Rutgers CAS technical contact.