No. That would be a feature request followed by an issue on Github :)


--Misagh



From: [email protected] [mailto:[email protected]] On Behalf Of K S
Sent: Thursday, November 17, 2016 10:35 AM
To: CAS Community <[email protected]>
Subject: [cas-user] Re: cas5 MFA for SAML2 SP



I was able to trigger it using the Opt-In Request Parameter but is there a 
way to do it using entityID in SAML2 SP service registry JSON ?

On Thursday, November 17, 2016 at 11:17:59 AM UTC-6, K S wrote:

Can MFA can be triggered for a specific SAML2 SP inside the CAS service 
registry. I am using following JSON but it's not triggering the DUO login . 
I am able to login to SP though.



{

  @class: org.apereo.cas.support.saml.services.SamlRegisteredService

  serviceId: 
https://localhost:8443/spring-security-saml2-sample/saml/metadata

  name: SAMLService

  id: 10000023

  description: SAML Client Metadata

  evaluationOrder: 10

  logoutType: BACK_CHANNEL

  attributeReleasePolicy:

  {

    @class: org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy

    principalAttributesRepository:

    {

      @class: 
org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository

      expiration: 2

      timeUnit: HOURS

    }

    authorizedToReleaseCredentialPassword: false

    authorizedToReleaseProxyGrantingTicket: false

  }

  multifactorPolicy:

  {

    @class: 
org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy

    multifactorAuthenticationProviders:

    [

      java.util.HashSet

      [

        mfa-duo

      ]

    ]

    failureMode: CLOSED

    principalAttributeNameTrigger: eduPersonAffiliation

    principalAttributeValueToMatch: alum

  }

  accessStrategy:

  {

    @class: org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy

    enabled: true

    ssoEnabled: true

    requireAllAttributes: true

    caseInsensitive: false

  }

  metadataLocation: /home/cas/spring-security-saml.xml

  metadataMaxValidity: 0

  signAssertions: false

  signResponses: true

  encryptAssertions: false

  metadataCriteriaRoles: SPSSODescriptor

  metadataCriteriaRemoveEmptyEntitiesDescriptors: true

  metadataCriteriaRemoveRolelessEntityDescriptors: true

}





-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: 
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups 
"CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an 
email to [email protected] 
<mailto:[email protected]> .
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/708c1df4-56bb-4e38-81a4-aec7bc687170%40apereo.org
 
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/708c1df4-56bb-4e38-81a4-aec7bc687170%40apereo.org?utm_medium=email&utm_source=footer>
 
.

-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/05a401d240fc%24fbc89ad0%24f359d070%24%40unicon.net.

Reply via email to