diff --git a/Gemfile b/Gemfile
index 48c911c..57fc45f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -13,7 +13,7 @@ gem 'geoblacklight', '~> 4.1.1'
 gem 'importmap-rails'
 gem 'jbuilder'
 gem 'jquery-rails'
-gem 'omniauth', '< 2.0'
+gem 'omniauth', '< 3.0'
 gem 'omniauth-cas'
 gem 'pg', '~> 1.4.6'
 gem 'puma', '~> 6.4.1'
diff --git a/Gemfile.lock b/Gemfile.lock
index 27dd19f..6409876 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -272,13 +272,14 @@ GEM
       racc (~> 1.4)
     oj (3.16.3)
       bigdecimal (>= 3.0)
-    omniauth (1.9.2)
+    omniauth (2.1.2)
       hashie (>= 3.4.6)
-      rack (>= 1.6.2, < 3)
-    omniauth-cas (2.0.0)
-      addressable (~> 2.3)
-      nokogiri (~> 1.5)
-      omniauth (~> 1.2)
+      rack (>= 2.2.3)
+      rack-protection
+    omniauth-cas (3.0.0)
+      addressable (~> 2.8)
+      nokogiri (~> 1.12)
+      omniauth (~> 2.1)
     orm_adapter (0.5.0)
     ostruct (0.6.0)
     ougai (1.9.1)
@@ -291,11 +292,14 @@ GEM
     popper_js (1.16.1)
     psych (5.1.2)
       stringio
-    public_suffix (5.0.4)
+    public_suffix (5.0.5)
     puma (6.4.2)
       nio4r (~> 2.0)
     racc (1.7.3)
     rack (2.2.9)
+    rack-protection (3.2.0)
+      base64 (>= 0.1.0)
+      rack (~> 2.2, >= 2.2.4)
     rack-test (2.1.0)
       rack (>= 1.3)
     rack-timeout (0.6.3)
@@ -491,7 +495,7 @@ DEPENDENCIES
   importmap-rails
   jbuilder
   jquery-rails
-  omniauth (< 2.0)
+  omniauth (< 3.0)
   omniauth-cas
   pg (~> 1.4.6)
   puma (~> 6.4.1)