HyperContent 2 uses JAAS for authentication. The built-in LoginModule implementation stores an MD5 Hash of the user's password in an XML file. CAS support for JAAS is coming soon.

HyperContent 1.x was able to leverage uPortal Groups and Permissions management for authorization. In 2.0, groups and permissions are stored in XML files in a project's repository. uPortal Groups and Permissions is currently being migrated to a standalone component, which will be an optional plugin in a future HyperContent 2.x release.