LDAP and CAS are central but LDAP is backend authentication and CAS is frontend/webbased. Also LDAP is not browser session-wide and therefore not a single-sign-on. With CAS you can login once and access all applications that are known as services to CAS. You could implement something similar with LDAP but that is pointless. We use CAS on top of LDAP. CAS is SSO!
