Nothing has recently changed in your CAS Config? If you can set this class to debug logging level org.apereo.cas.authentication.DefaultAuthenticationContextValidator. That should give you some insight into perhaps why this is getting hit.
On Thu, Feb 21, 2019 at 6:39 AM atilling <[email protected]> wrote: > CAS version 5.1.9 using MFA with DUO. We had this working fine for about > two years at this point. Tuesday it started causing problems for our > unenrolled users. We have the DUO setting "allow unenrolled users to pass > through without two-factor authentication" but sometime around 5 pm Tuesday > all unenrolled users started getting the error "The validation request for > ['ST-...'] cannot be satisfied. The request is either unrecognized or > unfulfilled." whenever logging into a Duo protected service. > > Has anyone else experienced this? Did something change with Duo in the > last 72 hours? We had to turn off Duo for these services and we don't want > to keep it off. > > Any help would be appreciated. > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/d6587944-0b2a-492c-9922-b84d0047486f%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/d6587944-0b2a-492c-9922-b84d0047486f%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAC_RtEYTpXOq15rrdGyJABxGjoYGjyu%3DKqw4fP3KVFgE%3Dq4_CA%40mail.gmail.com.
