apereo/cas ? reverse-engineered prompt

Build me a working Central Authentication Service setup that I can run locally and use as the login system for a few apps. I want a clean sign in flow, support for single sign on, and the ability to plug in common login methods like LDAP or a database, plus multi factor authentication if it’s easy to turn on. Please also include the usual enterprise stuff like OpenID Connect and SAML support, basic admin screens, and a simple way to register client apps and manage branding.

Set it up so I can start it without a lot of manual steps, and give me sensible defaults I can change later. If you need to check the latest docs or recommended setup, go ahead and look them up. Make sure the project runs cleanly and that I can test the main login flow end to end.