Hello again,
Just to say that I have solved my problem by adding this property to the
*cas.properties
*
cas.authn.attribute-repository.core.merger=MULTIVALUED
thanks in any case
El viernes, 17 de noviembre de 2023 a las 8:37:08 UTC+1, Jorge Bastida
escribió:
> Of course
>
> *cas.properties:*
>
> ...
> cas.authn.mfa.simple.name=mfa-simple
>
> cas.authn.mfa.simple.order=1
>
> cas.authn.mfa.simple.token.core.timeToKillInSeconds=90
>
> cas.authn.mfa.simple.sms.from=Company Name
>
> cas.authn.mfa.simple.sms.text=Code: ${token}
>
> cas.authn.mfa.simple.sms.attribute-name=irisPersonalUniqueID
>
> ...
>
> cas.authn.ldap[0].name=LdapAuthenticationHandler
>
> cas.authn.ldap[0].hostnameVerifier=ANY
>
> cas.authn.ldap[0].followReferrals=true
>
> cas.authn.ldap[0].min-pool-size=5
>
> cas.authn.ldap[0].max-pool-size=100
>
> cas.authn.ldap[0].validateOnCheckout=false
>
> cas.authn.ldap[0].validatePeriodically=true
>
> cas.authn.ldap[0].blockWaitTime=PT5S
>
> cas.authn.ldap[0].connectTimeout=PT1M
>
> cas.authn.ldap[0].validatePeriod=PT5M
>
> cas.authn.ldap[0].prunePeriod=PT5M
>
> cas.authn.ldap[0].validateTimeout=PT5S
>
> cas.authn.ldap[0].responseTimeout=PT5S
>
> cas.authn.ldap[0].idleTime=PT5M
>
> cas.authn.ldap[0].poolPassivator=BIND
>
> cas.authn.ldap[0].type=AUTHENTICATED
>
> cas.authn.ldap[0].passwordPolicy.enabled=true
>
> cas.authn.ldap[0].passwordPolicy.type=GENERIC
>
> cas.authn.ldap[0].passwordPolicy.warnAll=false
>
> cas.authn.ldap[0].passwordPolicy.warningDays=60
>
>
> cas.authn.ldap[0].passwordPolicy.policyAttributes.accountLocked=javax.security.auth.login.AccountLockedException
>
> cas.authn.ldap[0].order=0
>
> ...
>
> *service.json*
>
> {
>
> "@class": "org.apereo.cas.services.CasRegisteredService",
>
> "id": 168,
>
> "name": “Service Name”,
>
> "description": "Service Description”,
>
> "serviceId": "^http.*://service.com/.*”,
>
> "evaluationOrder": 168,
>
> "logoutType": "BACK_CHANNEL",
>
> "authenticationPolicy" : {
>
> "@class" :
> "org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy",
>
> "requiredAuthenticationHandlers" : ["java.util.TreeSet", [
> "LdapAuthenticationHandler", "mfa-simple" ]]
>
> },
>
> "accessStrategy": {
>
> "@class":
> "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy",
>
> "enabled": true,
>
> "ssoEnabled": true,
>
> "delegatedAuthenticationPolicy": {
>
> "@class":
> "org.apereo.cas.services.DefaultRegisteredServiceDelegatedAuthenticationPolicy",
>
> "permitUndefined": false
>
> },
>
> "usernameAttributeProvider": {
>
> "@class":
> "org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider"
>
> },
>
> "multifactorPolicy": {
>
> "@class":
> "org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy",
>
> "multifactorAuthenticationProviders": [
>
> "java.util.LinkedHashSet",
>
> [
>
> "mfa-simple"
>
> ]
>
> ],
>
> "forceExecution": true
>
> },
>
> "attributeReleasePolicy": {
>
> "@class": "org.apereo.cas.services.ReturnAllAttributeReleasePolicy",
>
> "authorizedToReleaseCredentialPassword": false,
>
> "authorizedToReleaseProxyGrantingTicket": false
>
> }
>
> }
>
>
> If I access the service the value of *authenticationMethod* is:
>
> [image: Captura de pantalla 2023-11-17 a las 8.10.04.png]
>
>
> the log file is very large, any particular lines?
>
>
>
>
>
>
>
> El jueves, 16 de noviembre de 2023 a las 20:30:31 UTC+1, Meysam Shirazi
> escribió:
>
> Hi Jorge
> Please share the configuration, and any log if available.
>
> On Thursday, November 16, 2023 at 3:22:43 PM UTC+3:30 Jorge Bastida wrote:
>
> Good morning,
>
> In CAS 6.3.7 when authenticating a service with mfa-simple the value of
> authenticationMethod was:
>
> authenticationMethod:
> 1.-LdapAuthenticationHandler
> 2.- mfa-simple
>
> However in 6.6.13 when I authenticate an identical service the value of my
> authenticationMethod is the following.
> authenticationMethod: mfa-simple
>
> The LdapAuthenticationHandler registry is lost, is there any way to
> replicate the CAS 6.3.7 behavior in 6.6.13?
>
> Thank you very much in advance.
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/62cb7b5e-6787-492a-821d-ca12f3eb0933n%40apereo.org.
