CAS Custom Authentication - Google MFA

[Ajey Gore]

All,

We have been using JaSig and now Apereo cas for almost 10 years. I wanted to implement a custom authentication handler which can support Google MFA - so auth we can automate user’s login over self sign up and get rid of complex password policy.

So we ended up writing our own custom authentication handler which talks to a rails based server for authenticating user name and token.

Just wanted to let people know, and help out someone who is facing any issues with CustomAuthentication Handler.

Here is URL for project. 

https://github.com/gate-sso/cas_gate

Thanks

Ajey

[Misagh Moayyed]

Google Authenticator is supported OOTB for MFA starting with CAS 5. I’d suggest you start there, and remove all your custom work, unless it’s something super special the baseline can’t handle for you. (In which case, let’s talk and see if it’s reasonable to make it behave that way) 

-- 
Misagh

--
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To post to this group, send email to cas-...@apereo.org.
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/54FFD863-186D-4D3B-B2D0-9CE69BED3612%40gmail.com.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

[Ajey Gore]

Misagh,

Nice to hear from you, We wanted it to hit Google MFA Rest based service. And that's why we just wrote a Custom Authentication handler which points to above service and get's token authorised, since we need to save security code some where else as well.

Ajey

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.5780f3a0.39b3150e.546f%40unicon.net.