Help Needed: Configuring CAS 6.6.15 with TrustBuilder/InWebo MFA for a Specific Service

[LeoS]

Hello,

I am trying to implement MFA with TrustBuilder/InWebo in CAS 6.6.15. I managed to enable it globally using cas.authn.mfa.triggers.global.global-provider-id=mfa-inwebo.

However, I want to enable MFA only for a specific service, but nothing seems to work, and I can't find clear documentation on how to do it.

I tried setting
cas.authn.mfa.inwebo[0].id=mfa-inwebo (and also cas.authn.mfa.inwebo.id=mfa-inwebo) in the .properties file and defining the multifactorPolicy in the service JSON
multifactorPolicy:
  {
    @class: org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy
    multifactorAuthenticationProviders: mfa-inwebo
  }
, but without success. I also attempted using a Groovy script, but it still does not prompt for MFA—CAS just shows the login page and proceeds without MFA after authentication.

Does anyone have any guidance on how to configure CAS to enforce MFA for a specific service?

Thanks in advance for your help!

[Eugene Willis]

Sent from my iPhone

On Mar 27, 2025, at 12:26 PM, LeoS <leose...@gmail.com> wrote:



--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/33ceb760-c663-425a-aac9-c9550b8e5573n%40apereo.org.

[LeoS]

Sorry but the link you sent is not working, also I have already seen the whole documentation (I succeed at set up the MFA globally thanks to it) and either I missed something or it lacks a proper explanation.

[Daniel Ellentuck]

Hi Leo,

I've found this doc helpful: https://apereo.github.io/cas/7.0.x/mfa/Configuring-Multifactor-Authentication.html especially the section on per-application triggers.  

Dan Ellentuck

Columbia University I.T.

On Thu, Mar 27, 2025 at 12:18 PM LeoS <leose...@gmail.com> wrote:

Hello, I am trying to implement MFA with TrustBuilder/InWebo in CAS 6. 6. 15. I managed to enable it globally using cas. authn. mfa. triggers. global. global-provider-id=mfa-inwebo. However, I want to enable MFA only for a specific service, but nothing

ZjQcmQRYFpfptBannerStart

This Message Is From an External Sender

This message came from outside your organization.

 

ZjQcmQRYFpfptBannerEnd

--