On Wed, Oct 12, 2016 at 01:45:32PM +0330, Misagh Moayyed wrote: >ERROR [org.apereo.cas.support.saml.web.view.Saml10SuccessResponseView] - ><Error generating SAML response for service example.edu.> >java.lang.ClassCastException: java.util.HashSet cannot be cast to >java.lang.String >at >org.apereo.cas.support.saml.web.view.Saml10SuccessResponseView.prepareResponse(Saml10SuccessResponseView.java:60) > ~[cas-server-support-saml-5.0.0.RC4-SNAPSHOT.jar:5.0.0.RC4-SNAPSHOT] >at >org.apereo.cas.support.saml.web.view.AbstractSaml10ResponseView.renderMergedOutputModel(AbstractSaml10ResponseView.java:104) > ~[cas-server-support-saml-5.0.0.RC4-SNAPSHOT.jar:5.0.0.RC4-SNAPSHOT] >... > > >This is a bug. Please file an issue.
Filed <https://github.com/apereo/cas/issues/2039> Appears fixed in more recent RC4-SNAPSHOT release. >Ultimately what we'd like to do though is invoke MFA-Duo globally, and >not via an application triggered policy. It looks like the CAS properties >listed here may be relevant, but it's not clear to me how they should >be used. >Global triggers, that are not tied to principal or services, are not possible >explicitly. Please file a feature request. We might be able to make something work if it's tied to a principal, but again, I'm not sure how to do this. The docs say, "MFA can be triggered for all users/subjects carrying a specific attribute that matches configured attribute value. The attribute value is a regex pattern and must match the provider id of an available MFA provider described above." They don't provide an example of this though, and if it's the in the cas.properties docs, the most likely candidate appears to be cas.authn.mfa.globalPrincipalAttributeNameTriggers. The commented out sample provided there does not appear to be set to something I can see matches a regex pattern and provider id. Aloha, -baron -- Baron Fujimoto <ba...@hawaii.edu> :: UH Information Technology Services minutas cantorum, minutas balorum, minutas carboratum desendus pantorum -- CAS gitter chatroom: https://gitter.im/apereo/cas CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html CAS documentation website: https://apereo.github.io/cas CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To post to this group, send email to cas-user@apereo.org. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/20161012211516.GC23083%40praenomen.mgt.hawaii.edu. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
