MFA with Duo in CAS 4.2.x

[Sam]

Hello,

Does anyone have CAS 4.2.x working with Duo?

Looking at Duo's site I can see there are instructions on how to configure this with CAS https://duo.com/docs/cas , however these lead here https://github.com/Unicon/cas-mfa which support 4.1.x but explicitly does not support 4.2.x .

In the Apereo documentation I can see there is support for Duo in future https://apereo.github.io/cas/development/installation/DuoSecurity-Authentication.html but this page appears to refer to not yet supported code.

Looking at the 4.2.x documentation tree the best I can find is: https://apereo.github.io/cas/4.2.x/installation/Configuring-Multifactor-Authentication.html which talks about support for Yubikey but nothing else.

Is there something I've missed?

All the best,

Sam Jones

[Dmitriy Kopylenko]

The cas-mfa library does not support CAS 4.2.x series, you are correct about that.

For the CAS v5 native Duo mfa support see this: https://apereo.github.io/cas/5.0.x/installation/DuoSecurity-Authentication.html (you were looking at the “development” version of the documentation hence “Workers Ahead” notice)

Hope this helps,

D.

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c6494abe-7fa4-4963-a018-6bd5c2a0d49a%40apereo.org.

[Dmitriy Kopylenko]

but maybe 4.2 has native support for duo?

No.

[Travis Schmidt]

We customized 4.2.x to use Duo.  Looking back it was probably more work then benefit, but we thought we needed it for some reason before 5.0 would be released.  If you truly need MFA make the move to 5.0.  Works out of the box with only a small amount of configuration.

On Mon, Nov 14, 2016 at 7:29 AM Dmitriy Kopylenko <dkopy...@unicon.net> wrote:

but maybe 4.2 has native support for duo?

No.

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.5829d863.5ad72059.7f8%40unicon.net.

[Sam Jones]

Thanks for the quick response!

So it is supported in version 5.0.0, that's good to know.

There is a difference here between native support like in version 5 and cas-mfa
library support. You've confirmed what I thought about 4.2 and cas-mfa library
compatability, but maybe 4.2 has native support for duo?

Sam,