Communication Strategy for mfa-simple

86 views
Skip to first unread message

Jérôme Rautureau

unread,
Mar 18, 2026, 8:26:31 AMMar 18
to CAS Community
Hello guys,

We have two instances of CAS 7.3.5 (docker image)

I don't know how to specify that the cas mfa-simple MUST use email only.

tried various config such as : 

cas.authn.mfa.simple.communication-strategy.supported-types=EMAIL

i didn't find any documentation about this configuration too.

I want ot keep SMS notification for other usages (pw reset for instance)

Thanks in advance

--
Jérôme Rautureau

Petr Bodnár

unread,
Mar 21, 2026, 12:27:39 PMMar 21
to CAS Community, Jérôme Rautureau
Hi Jérôme,

I think your observations are correct, i.e. there is currently no way how to disable SMS just for Simple MFA via CAS configuration.

The only option here seems to override the mfaSimpleMultifactorTokenCommunicationStrategy bean (as per this CAS guide) with an instance that would return something else than the default ALL = EnumSet.allOf(TokenSharingStrategyOptions.class);. For reference, the OOTB bean is defined as follows:

        @ConditionalOnMissingBean(name = CasSimpleMultifactorTokenCommunicationStrategy.BEAN_NAME)
        @Bean
        @RefreshScope(proxyMode = ScopedProxyMode.DEFAULT)
        public CasSimpleMultifactorTokenCommunicationStrategy mfaSimpleMultifactorTokenCommunicationStrategy() {
            return CasSimpleMultifactorTokenCommunicationStrategy.all();
        }

If you need even more control over the sending process, you can override the whole CasSimpleMultifactorSendTokenAction class - but it would be probably an overkill in this case.

Best regards
Petr

Jérôme Rautureau

unread,
Mar 22, 2026, 11:45:06 AMMar 22
to cas-...@apereo.org
ok. I will do that.

Thanks Petr for your help


--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/af1d130a-9d12-433f-be1e-e549cd8c99a4n%40apereo.org.


--
Jérôme Rautureau
Reply all
Reply to author
Forward
0 new messages