cas-mfa | CAS server overlay with support for multifactor | Authentication library

by Unicon Java Version: 1.0.0-RC10 License: Apache-2.0

X-Ray Key Features Code Snippets(3)Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | cas-mfa Summary

cas-mfa is a Java library typically used in Security, Authentication applications. cas-mfa has no bugs, it has no vulnerabilities, it has build file available, it has a Permissive License and it has low support. You can download it from GitHub, Maven.

This is a project to develop free and open source compatibly licensed extensions for the CAS server v4.1.x product implementing.

Support

Quality

Security

License

Reuse

Support

cas-mfa has a low active ecosystem.

It has 23 star(s) with 20 fork(s). There are 26 watchers for this library.

It had no major release in the last 12 months.

There are 1 open issues and 86 have been closed. On average issues are closed in 81 days. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of cas-mfa is 1.0.0-RC10

Quality

cas-mfa has 0 bugs and 0 code smells.

Security

cas-mfa has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

cas-mfa code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

cas-mfa is licensed under the Apache-2.0 License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

cas-mfa releases are available to install and integrate.

Deployable package is available in Maven.

Build file is available. You can build the component from source.

Installation instructions are not available. Examples and code snippets are available.

It has 10168 lines of code, 575 functions and 165 files.

It has medium code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed cas-mfa and discovered the below as its top functions. This is intended to give you an instant insight into cas-mfa implemented functionality, and help decide if they suit your requirements.

Resolves the authentication method for the given authentication service
Gets the mfa request context
Lookup the mfa data for a specific service
Returns true if the value matches the specified attribute pattern
Attempts to extract multifactor authentication method
Checks for mfa - role attributes
Determine the default authentication method
Encodes the given byte buffer to the given output buffer
Encodes the given raw ByteBuffer to the given character buffer
Perform the actual execution
Gets the primary principal
Check whether there are more than the requested authentication method
Add the ticket to the flow scope
Generate the MFA event
Extracts the service for the given request
Create ticket granting ticket
Submit the request
Returns true if the specified service is equal
Verify a signature response
Build an event from the context
Resolve mfa roles
Get person to greet
Handles authentication
Validates the authentication method for this validation request
Initializes the framework properties
Generate a signed request

Get all kandi verified functions for this library.

cas-mfa Key Features

No Key Features are available at this moment for cas-mfa.

cas-mfa Examples and Code Snippets

Per Application & Attribute

Java

Lines of Code : 20

License : Permissive (Apache-2.0)

Copy

{
  "@class" : "org.jasig.cas.services.RegexRegisteredService",
  "serviceId" : "^https://.*",
  "properties" : {
    "@class" : "java.util.HashMap",
    "authn_method" : {
      "@class" : "org.jasig.cas.services.DefaultRegisteredServiceProperty",

Messages

Java

Lines of Code : 20

License : Permissive (Apache-2.0)

Copy

# Multifactor Authentication Messages
UNACCEPTABLE_AUTHENTICATION_METHOD=Ticket ''{0}'' did not fulfill the required authentication method ''{1}''.
UNRECOGNIZED_AUTHENTICATION_METHOD=This CAS server does not recognize the authentication method [''{0}

Per Application

Java

Lines of Code : 12

License : Permissive (Apache-2.0)

Copy

{
  "@class" : "org.jasig.cas.services.RegexRegisteredService",
  "serviceId" : "^https://.*",
  "properties" : {
    "@class" : "java.util.HashMap",
    "authn_method" : {
      "@class" : "org.jasig.cas.services.DefaultRegisteredServiceProperty",

Community Discussions

Trending Discussions on cas-mfa

CAS 6.2.x MFA Principal Attribute Trigger 'memberOf' Active Directory Not Working

QUESTION

CAS 6.2.x MFA Principal Attribute Trigger 'memberOf' Active Directory Not Working

Asked 2020-Jul-20 at 14:52

I have CAS 6.2.x running in Kubernetes building the image from this repo. I am passing in the cas.properties file via configmap.I have it wired up against Active Directory and am able to login with the Username/Password. I am now working to enable MFA with the Google Authenticator plugin. I have this working as well if I force the flow globally with the following:
cas.authn.mfa.global-provider-id=mfa-gauth

When I try to use the values described here for Multifactor Authentication: Principal Attribute Trigger it doesn't send me to the MFA flow. These are the settings that I have set:
cas.authn.ldap[0].principalAttributeList=userPrincipalName,cn,givenName,sAMAccountName,memberOf
cas.authn.mfa.global-principal-attribute-name-triggers=memberOf
cas.authn.mfa.global-principal-attribute-value-regex=ForceMfa

When I log in these are the values returned back for memberOf:

memberOf
[CN=Group2,OU=MyOu,DC=subdomain,DC=domain,DC=local, CN=Group1,OU=MyOu,DC=subdomain,DC=domain,DC=local, CN=ForceMfa,OU=MyOu,DC=subdomain,DC=domain,DC=local]
Principal

I used Misagh blog post as a guide.

If I change the trigger and regex to sAMAccountName and my username it then works as expected. Not sure if I need to change the regex format to find the group name or if I just have something else wrong. It just seems like the regex is not finding a match for some reason as the settings seem to be working for me, just not with memberOf.

Thank you

...

ANSWER

Answered 2020-Jul-20 at 14:52

Consider switching this to:

Source https://stackoverflow.com/questions/62798470

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install cas-mfa

You can download it from GitHub, Maven.
You can use cas-mfa like any standard Java library. Please include the the jar files in your classpath. You can also use any IDE and you can run and debug the cas-mfa component as you would do with any other Java program. Best practice is to use a build tool that supports dependency management such as Maven or Gradle. For Maven installation, please refer maven.apache.org. For Gradle installation, please refer gradle.org .