Hi Leo,
I've found this doc helpful:
https://apereo.github.io/cas/7.0.x/mfa/Configuring-Multifactor-Authentication.html
especially
the section on per-application triggers
<https://apereo.github.io/cas/7.0.x/mfa/Configuring-Multifactor-Authentication-Triggers-PerApplication.html>
.
Dan Ellentuck
Columbia University I.T.
On Thu, Mar 27, 2025 at 12:18 PM LeoS <leosegui...@gmail.com> wrote:
> Hello, I am trying to implement MFA with TrustBuilder/InWebo in CAS 6. 6.
> 15. I managed to enable it globally using cas. authn. mfa. triggers.
> global. global-provider-id=mfa-inwebo. However, I want to enable MFA only
> for a specific service, but nothing
> ZjQcmQRYFpfptBannerStart
> This Message Is From an External Sender
> This message came from outside your organization.
>
> ZjQcmQRYFpfptBannerEnd
>
> Hello,
>
> I am trying to implement MFA with TrustBuilder/InWebo in CAS 6.6.15. I
> managed to enable it globally using
> cas.authn.mfa.triggers.global.global-provider-id=mfa-inwebo.
>
> However, I want to enable MFA only for a specific service, but nothing
> seems to work, and I can't find clear documentation on how to do it.
>
> I tried setting
> cas.authn.mfa.inwebo[0].id=mfa-inwebo (and also cas.authn.mfa.inwebo.id
> =mfa-inwebo) in the .properties file and defining the multifactorPolicy
> in the service JSON
> multifactorPolicy:
> {
> @class:
> org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy
> multifactorAuthenticationProviders: mfa-inwebo
> }
> , but without success. I also attempted using a Groovy script, but it
> still does not prompt for MFA—CAS just shows the login page and proceeds
> without MFA after authentication.
>
> Does anyone have any guidance on how to configure CAS to enforce MFA for a
> specific service?
>
> Thanks in advance for your help!
>
> --
> - Website: https://apereo.github.io/cas
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__apereo.github.io_cas&d=DwMFaQ&c=009klHSCxuh5AI1vNQzSO0KGjl4nbi2Q0M1QLJX9BeE&r=-mB15dnBKNLdHrR8X3_Cl9nFRgXc2Yv75SvfnOkg3pE&m=gqCAkMKvZiDuLQeEzS_BoVnFu_98MZMA0LSLig35CWOeUXxJTXUdyZGcXiBSzHJd&s=gXaJTM5Zl9P6KdBwK8AZ9Yd5dPgx_lv1r_4iZj2IyYo&e=>
> - List Guidelines: https://goo.gl/1VRrw7
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__goo.gl_1VRrw7&d=DwMFaQ&c=009klHSCxuh5AI1vNQzSO0KGjl4nbi2Q0M1QLJX9BeE&r=-mB15dnBKNLdHrR8X3_Cl9nFRgXc2Yv75SvfnOkg3pE&m=gqCAkMKvZiDuLQeEzS_BoVnFu_98MZMA0LSLig35CWOeUXxJTXUdyZGcXiBSzHJd&s=pZ-oOq0Lt0R6rsJF25DOyrKknGAypisdJhWOeFyMFe8&e=>
> - Contributions: https://goo.gl/mh7qDG
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__goo.gl_mh7qDG&d=DwMFaQ&c=009klHSCxuh5AI1vNQzSO0KGjl4nbi2Q0M1QLJX9BeE&r=-mB15dnBKNLdHrR8X3_Cl9nFRgXc2Yv75SvfnOkg3pE&m=gqCAkMKvZiDuLQeEzS_BoVnFu_98MZMA0LSLig35CWOeUXxJTXUdyZGcXiBSzHJd&s=ndbMQqP1OvdW2qe1dz-GJvZezYsVocfF9bUPOeEQ_pw&e=>
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/33ceb760-c663-425a-aac9-c9550b8e5573n%40apereo.org
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/33ceb760-c663-425a-aac9-c9550b8e5573n%40apereo.org?utm_medium=email&utm_source=footer>
> .
>
--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFqYg5Kc-63%3DeDw2zvQFciQeOc8UUP4DMk2hJKt2zm308R3zzQ%40mail.gmail.com.
