Ray, Thanks for the tip. It was what I needed. Seems like that should be explicitly stated in the CAS documentation for clarity.
Thanks, Ian On Fri, Sep 2, 2022 at 1:55 PM Ray Bon <[email protected]> wrote: > Ian, > > Cas will use old prompt when duo-application-key is in the property file. > Remove it and cas will use the universal prompt. > see > https://fawnoos.com/2021/05/07/cas63x-duo-security-mfa-universal-prompt/ > > Ray > > On Fri, 2022-09-02 at 12:46 -0400, Ian Wat wrote: > > Notice: This message was sent from outside the University of Victoria > email system. Please be cautious with links and sensitive information. > > We are running on CAS 6.4 but are looking to try out Duo's Universal > Prompt. Duo's documentation says that CAS 6.3 or greater should work. > Should this work out of the box? I've been trying to look at both Duo and > CAS documentation on how to implement but struggle to figure it out. > > Our Duo application universal prompt status is set as App Update Ready. > I've tried adding the duo-universal-sdk dependency as described in > https://duo.com/docs/duoweb#java but maybe that doesn't apply to a CAS > application. I've also updated to the latest 6.4 release. The CAS > documentation doesn't mention any configuration changes that are required. > What am I missing? > > Thanks, > Ian Wat > Bucknell University > > > > On Fri, Jul 29, 2022 at 7:16 PM Jonathon Taylor <[email protected]> > wrote: > > Hi Mike, > > We are on the latest version of CAS 6.5 and using Duo's Universal Prompt > since April 5th. We ran into some initial problems while testing, and > specific to the surrogate authentication feature of CAS, but that was > fixed. We are happy with it and have received positive feedback from our > users. > > On Fri, Jul 29, 2022 at 3:51 PM Mike Osterman <[email protected]> > wrote: > > So as not to co-opt Baron's "CAS 6.5 w/ Duo MFA, was MFA actually used?" > thread where Ray brings up Universal Prompt, I'm starting a new one. > > I seem to remember a while back there were issues with CAS + Duo's > Universal Prompt. Is anyone using it successfully/happily in production, or > is it better to stay with the previous version of Duo for now? I > suspect that my Information Security Officer is about to ask me about it > again... > > Thanks! > Mike > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAEdMQHWitmLUJfHXMt8Q%2BUWaKi18KXi%3DB%3Dk0jcuA4X1a9r-Hyw%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAEdMQHWitmLUJfHXMt8Q%2BUWaKi18KXi%3DB%3Dk0jcuA4X1a9r-Hyw%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > > > > -- > Jonathon Taylor > Information Security Office > [email protected] > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABzqDo8k0zvToCLtEEKQepf0arwFU-wQQr8dWOZFo74Mwx-Tow%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABzqDo8k0zvToCLtEEKQepf0arwFU-wQQr8dWOZFo74Mwx-Tow%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/1bfa84ed824f1698e1b1cdefd80a11b7c1f9a76c.camel%40uvic.ca > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/1bfa84ed824f1698e1b1cdefd80a11b7c1f9a76c.camel%40uvic.ca?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALKbpJSY3pC5nu0DH-KNHPTgtxMXd96Fntd62%2BRgr0VOMY7vxw%40mail.gmail.com.
