Re: [cas-user] Enforce MFA without authentication (active SSO session)

2024-05-08 Thread Ray Bon
Tom, Our setup is a bit different. We use this for services that require MFA "multifactorPolicy": { "@class": "org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy", "multifactorAuthenticationProviders": [ "java.util.HashSet", [ "mfa-duo" ] ], "failureMode": "CLOSED", "principalAttrib

Re: [cas-user] Enforce MFA without authentication (active SSO session)

2024-05-07 Thread tjan...@gmail.com
Hi, thanks for the response! Actually what seems to happen is that when */authorize* is called, the CAS *OAuth20HandlerInterceptorAdapter.preHandle() *is invoked which in turn invokes the pac4j *SecurityInterceptor*. Eventually the *org.pac4j.core.engine.DefaultSecurityLogic *gets called and i

Re: [cas-user] Enforce MFA without authentication (active SSO session)

2024-05-07 Thread Ray Bon
Tom, Could it be that the groovy script is returning null or a value that cas does not understand? Ray On Tue, 2024-05-07 at 06:49 -0700, tjan...@gmail.com wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive inf