Spring security vs Apache Shiro
===

What I have researhed so far most of them are saying Apache Shiro is easy to use and easy to integrate with CAS (for SSO etc). Just to ask if anyone has got experienced using both of them and which one to use and why one is better than other?