Try Ultimate Member plugin and turn on the user email edit. This will register the CAS users as normal WordPress users and you can add multiple roles.
After that, the users can sign in with CAS and they can reset their passwords, they will have two ways to login to the same profile.
Thanks @yamanisa. This is a tough one because multiple role support in WordPress core isn’t great. For example, using the set_role() function on WP_User removes *all* existing roles and replaces them with the new one. (Authorizer uses set_role() when you change the role from the drop down menu in the Approved Users list.) This might get better in the future, but don’t hold your breath. In the meantime, you should be ok with @yamanisa’s suggestion as long as you don’t change the role via the Authorizer Approved User drop down menus.
Thread Starter
abjork
(@abjork)
Thanks @yamanisa and @figureone for your replies, I really appreciate it. I checked out the Ultimate Member plugin but decided to go the route of one user = one role to minimize compatibility risks moving forward (not just with this plugin but with others as well).