Casa enforce MFA

By: Alexandre Zia Account Admin 06 Apr 2020 at 2:16 p.m. CDT

1 Response
Alexandre Zia gravatar
I'm evaluating Casa along with Gluu. Today an user has noticed that he was able to log in into a SAML integrated system through Casa without MFA. In fact he hasn't added any MFA method in his account yet. Is there a way to enforce MFA in a way that users can't authenticate to remote systems if he doesn't have registered any MFA method in his account through Casa? Thanks in advance
CentOS 7.7
closed

Answers

By Michael Schwartz Account Admin 06 Apr 2020 at 2:57 p.m. CDT

Copy
Michael Schwartz gravatar
You could update the Casa person authn interception script to require registration of 2FA.

Post an answer