Hello We have enabled MFA using Duo at the global level and have also implemented a global OPEN failure policy.
This works as expected when we contrive a test with Duo being unavailable. However we have also noticed, during our test, that calling the Actuator Health Check url also causes CAS to be marked as DOWN when Duo is DOWN. Given we use the health check url on our Load Balancer to check nodes are up, this is not ideal, as all nodes are marked as DOWN, and we can't fall back to the MFA global OPEN failure policy. There are docs about enabling/disabling monitoring in the health check but none on MFA/Duo. Can we exclude Duo monitoring from the actuator health check? Thanks -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/abed5b4a-7deb-4d74-9acd-a5e2acaf4e2d%40apereo.org.
