Duo Universal Prompt and CAS method=POST

[John Wagenleitner]

We have a few services that rely on being able to get the CAS ticket POST'd back. When those services redirect the user to the CAS login page they include the query string parameter `method=POST` in addition to the service parameter.

This works with Duo in a frame (or if MFA is bypassed) but is not working for the Duo Universal Prompt. After Duo POST's back to CAS with the state, CAS then sends the user back to the service using a GET.

I have tested in CAS v6.6.15, 6.6.14 and 6.6.9 and all do not work with passing method=POST and using the Universal Prompt.

Just wondering if anyone else has seen this issue and, if so, have found a workaround?

Thanks

John