Sent from my iPhone

On Mar 27, 2025, at 12:26 PM, LeoS <leosegui...@gmail.com> wrote:



Hello,

I am trying to implement MFA with TrustBuilder/InWebo in CAS 6.6.15. I managed to enable it globally using cas.authn.mfa.triggers.global.global-provider-id=mfa-inwebo.

However, I want to enable MFA only for a specific service, but nothing seems to work, and I can't find clear documentation on how to do it.

I tried setting
cas.authn.mfa.inwebo[0].id=mfa-inwebo
(and also cas.authn.mfa.inwebo.id=mfa-inwebo) in the .properties file and defining the multifactorPolicy in the service JSON
multifactorPolicy:
  {
    @class: org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy
    multifactorAuthenticationProviders: mfa-inwebo
  }
, but without success. I also attempted using a Groovy script, but it still does not prompt for MFA—CAS just shows the login page and proceeds without MFA after authentication.

Does anyone have any guidance on how to configure CAS to enforce MFA for a specific service?

Thanks in advance for your help!

--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/33ceb760-c663-425a-aac9-c9550b8e5573n%40apereo.org.

--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/EE1FED8B-1837-4A0B-B96E-CD286839EAD0%40gmail.com.

Reply via email to