Mathematically .. think salted hash of list of known values. output is on the card .. you compare the values you have against what they gave you and see if it matches. The salt is unique per card. You buy them in bulk and you get a list of serial numbers = card ID .. usually there's QR so you can do it somewhat easily via your crediantialing office (make someone else do that BS, it's big numbers).
In Cas it's like any other plugin. The value of the current card and salt is stored in (somewhere) and identifiable by (something) like the DN. It looks up both, just like how the others work. IIRC you can also do it via API but that's a bad dependency if it's not you running it, and why bother if it's you. Michael Holstein CISSP Cleveland State University ________________________________ From: cas-user@apereo.org <cas-user@apereo.org> on behalf of Janina Byky <projekt.ha...@gmail.com> Sent: Thursday, March 15, 2018 9:44:29 AM To: CAS Community Subject: [cas-user] Google Authenticator - scratch codes Hello CAS users, I've worked out CAS + GAuth + mongodb, but I don't know how does the scratch codes work in terms of CAS? How user can use them ? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org<mailto:cas-user+unsubscr...@apereo.org>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c000a5a2-a3d2-40e2-ac19-27f521f3155f%40apereo.org<https://groups.google.com/a/apereo.org/d/msgid/cas-user/c000a5a2-a3d2-40e2-ac19-27f521f3155f%40apereo.org?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/DM2PR0801MB086378D99DD5C564263F593F83D00%40DM2PR0801MB0863.namprd08.prod.outlook.com.
