Does anyone actually have it working, even on an older version, and would 
not mind sharing what they had to do? 

I've built CAS with:

support-ldap
support-git-service-registry
support-gauth,support-saml
support-saml-idp
support-oidc
support-couchbase-ticket-registry
support-trusted-mfa
support-trusted-mfa-rest

The configuration:
cas.authn.mfa.gauth.core.label=TEST
cas.authn.mfa.gauth.core.issuer=TESTMFA

cas.authn.mfa.trusted.crypto.encryption.key=[removed]
cas.authn.mfa.trusted.crypto.signing.key=[removed]

cas.authn.mfa.trusted.device-fingerprint.cookie.crypto.encryption.key=[removed]
cas.authn.mfa.trusted.device-fingerprint.cookie.crypto.signing.key=[removed]

cas.authn.mfa.triggers.principal.global-principal-attribute-name-triggers=memberOf
cas.authn.mfa.triggers.principal.global-principal-attribute-value-regex=.*MFA.+

cas.authn.mfa.gauth.rest.url=http://localhost/googleAuthenticator.php?

cas.authn.mfa.gauth.core.trusted-device-enabled=true
cas.authn.mfa.trusted.rest.url=http://localhost/trustedDevice.php?
cas.authn.mfa.trusted.core.auto-assign-device-name=true


cas.authn.mfa.gauth.crypto.encryption.key=[removed]
cas.authn.mfa.gauth.crypto.signing.key=[removed]
cas.authn.mfa.gauth.crypto.enabled=true

cas.authn.mfa.trusted.cleaner.schedule.enabled=false

cas.authn.mfa.trusted.device-fingerprint.cookie.comment=AUTH
cas.authn.mfa.trusted.device-fingerprint.cookie.max-age=36000
cas.authn.mfa.trusted.device-fingerprint.cookie.name=AUTH

cas.authn.mfa.trusted.device-fingerprint.client-ip.order=0
cas.authn.mfa.trusted.device-fingerprint.cookie.order=1
cas.authn.mfa.trusted.device-fingerprint.component-separator=@

cas.authn.mfa.trusted.device-fingerprint.geolocation.enabled=false
cas.authn.mfa.trusted.device-fingerprint.client-ip.enabled=true
cas.authn.mfa.trusted.device-fingerprint.cookie.enabled=true

I'm pretty much not getting anywhere with any of the advanced MFA options, 
and it's kinda disappointing. I've even tried the in memory trusted device 
option to no avail.

Thank you,
Matt

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/9407fbbb-d136-4368-b30e-1ed3f0a6394cn%40apereo.org.

Reply via email to