CAS 5.x MFA auditing

[Richard Frovarp]

Is there a way to generate more audit logs of MFA in CAS 5.x? I'm
guessing it might require changing code.

With the Duo implementation (and perhaps others), there is only an audit
entry for when it passes and is successful. All of the failures happen
between the browser and Duo's system, and don't appear to get
communicated back to CAS. So there is no way to audit log / graph
failures or abandons.

If it was logged that MFA was triggered, any that aren't followed by a
success log would indicate a failure or abandon. That seems like the
sort of thing one would want to know.

[Misagh Moayyed]

I don't recall/think much of that is audited at that level, but you're
welcome to submit an issue.

--Misagh

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines:
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups
"CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to cas-user+u...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/7ffd2390-063c-b097-52a4-e963fa68ca50%40ndsu.edu.