Hi all watching the log The ticket for mfa-simple is generated correctly and sent via SMS to the user
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Adding ticket *[CAS-811937*] with ttl [30s]> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Encoding ticket [TransientSessionTicketImpl(super=CAS-811937, service=null, properties={})]> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Encoded original ticket id [CAS-811937] to *[* *285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc* 4]> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Created encoded ticket [EncodedTicket(id=285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc4)]> [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map name [transientSessionTicketsCache] for ticket definition [DefaultTicketDefinition(implementationClass=class org.apereo.cas.ticket.TransientSessionTicketImpl, *prefix=TST*, properties=DefaultTicketDefinitionProperties(cascade=false, storageName=transientSessionTicketsCache, storageTimeout=300, storagePassword=null), order=2147483647)]> [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located Hazelcast map instance [transientSessionTicketsCache]> [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Added ticket [285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc4] with ttl [30s]> [org.apereo.cas.mfa.simple.web.flow.CasSimpleSendTokenAction] -* <Successfully submitted token via SMS to [zzzzzzzzzzz* *]>* later the user .... [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Attempting authentication of *[CAS-811937] *using [mfa-simple]> [org.apereo.cas.mfa.simple.CasSimpleMultifactorAuthenticationHandler] - <Received token [*CAS-811937*]> [org.apereo.cas.mfa.simple.CasSimpleMultifactorAuthenticationHandler] - <Received principal id [zzzzzzzzzzz]. Attempting to locate token in registry...> [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Encoded original to [ *285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc4* ]> [org.apereo.cas.ticket.DefaultTicketCatalog] -* <Ticket definition for [CAS-811937] cannot be found in the ticket catalog which only contains the following ticket types: [[TGT, ST, RT, AT, PT, TST, OC, SART, PGT, SATQ, ODT]]>* [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <No ticket definition could be found in the catalog to match [CAS-811937]> [org.apereo.cas.mfa.simple.CasSimpleMultifactorAuthenticationHandler] - <Authorization of token [CAS-811937] has failed. Token is not found in registry> [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authentication has failed. Credentials may be incorrect or CAS cannot find authentication handler that supports [CasSimpleMultifactorTokenCredential()] of type [CasSimpleMultifactorTokenCredential]. Examine the configuration to ensure a method of authentication is defined and analyze CAS logs at DEBUG level to trace the authentication event.> [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <[mfa-simple] exception details: [Failed to authenticate code CAS-811937]. This is my configuration: cas.smsProvider.rest.method=POST cas.smsProvider.rest.url=https://xxxxxx/sms.php cas.authn.mfa.simple.sms.from=XXXXXX cas.authn.mfa.simple.sms.attributeName=TelephoneNumber cas.authn.mfa.simple.name=mfa-simple cas.authn.mfa.simple.order=1 cas.authn.mfa.simple.timeToKillInSeconds=30 cas.authn.mfa.globalPrincipalAttributeNameTriggers=memberof cas.authn.mfa.globalPrincipalAttributeValueRegex=xxxxx Its like that encoding the ticket works fine but later the ticket isn't TST Any suggestion will be welcome -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7c0ffc05-b036-4e5c-b091-9cee4672cb38%40apereo.org.