Livio, Many MFA triggers allow a regex for the value. If that does not work, you can use a groovy script [1].
Ray [1] https://apereo.github.io/cas/7.2.x/mfa/Configuring-Multifactor-Authentication-Triggers-Groovy.html ________________________________ From: [email protected] <[email protected]> on behalf of livio dezorzi <[email protected]> Sent: April 27, 2026 04:35 To: CAS Community <[email protected]> Subject: [cas-user] Trigger or Bypass MFA In a Zero Trust architecture, the internal network is no longer considered an area of absolute trust, especially if privileges are high there for some users. I'd also like to find the best approach to apply Simple MFA to internal users. The public application is already configured if the user is in the appropriate "Argos" group (@class DefaultRegisteredServiceAccessStrategy), so is it possible to configure the DefaultRegisteredServiceMultifactorPolicy class to apply MFA if the user is also part of a new "Argos-MFA" group ? -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00a4783c-2e91-4f0c-bf69-b4116992d87an%40apereo.org<https://groups.google.com/a/apereo.org/d/msgid/cas-user/00a4783c-2e91-4f0c-bf69-b4116992d87an%40apereo.org?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/YQBP288MB00817A24CFEA73383F82CD3ECE362%40YQBP288MB0081.CANP288.PROD.OUTLOOK.COM.
