We're working on a CAS 7.0.0-RC7 with Duo Universal prompt for MFA. We have the following in our configs for Duo:
build.gradle: implementation "org.apereo.cas:cas-server-support-duo" cas.properties: cas.authn.mfa.duo[0].duo-integration-key=<our duo integration key> cas.authn.mfa.duo[0].duo-secret-key=<our duo integration key> cas.authn.mfa.duo[0].duo-api-host=<our duo api host> Specifically not set in cas.properties is "cas.authn.mfa.duo[0].duo-application-key=", which if I understand correctly is the way to activate the Duo Universal Prompt [*]. I believe we also have the Duo side of things properly configured for their Universal Prompt with the Duo Application being used by this CAS set to use type "CAS (Central Authentication Service)". Although it appears to work as expected, the following warning is logged: WARN [org.apereo.cas.adaptors.duo.authn.BaseDuoSecurityAuthenticationService] - <Duo returned an Invalid response with message [Access forbidden] and detail [Wrong integration type for this API.] when determining user account. This maybe a configuration error in the admin request and Duo will still be considered available.> Does anyone know what this warning is for and how to resolve it? [*] References - < https://apereo.github.io/cas/development/mfa/DuoSecurity-Authentication.html#universal-prompt > - <https://fawnoos.com/2023/01/29/cas70x-duo-security-mfa-universal-prompt/> -- Baron Fujimoto <ba...@hawaii.edu> ::: UH Information Technology Services minutas cantorum, minutas balorum, minutas carboratum descendus pantorum -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL3_PJWovx1Qd%3D2tP4X%2BQQqYabUeGw6MvjhNc68AHAR9_Q%40mail.gmail.com.
