Second test : - SPNEGO - yubikey => works oddly : my client service page uses phpCAS, on first pass I get an "Authentication Error, try again", If I click on "try again", then yubikey token is asked, and after validation, I'm logged to the application.
I suspect that transition on success after SPNEGO to be incorrect. It's hardcoded to CasWebflowConstants.TRANSITION_ID_SEND_TICKET_GRANTING_TICKET, but MFA shoud be inspected before sending TGC, shouldn't it ? It should, yes. Do submit a bug plz. I suspect MFA only takes into account interactive authn, which is something that needs to be fixed. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.57e567f8.1ae214b4.2e6e%40unicon.net. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
