MFA attribute for CAS serviceValidate

[John C. Pfeifer]

As an intellectual exercise, I went down the rabbit hole and came back up with and attribute definition script of:

            casContext = profileContext.getSubcontext("net.shibboleth.idp.cas.protocol.ProtocolContext");
            if(casContext != null){
                ticketContext = casContext.getSubcontext("net.shibboleth.idp.cas.ticket.TicketContext");
                if(ticketContext != null){
                    ticket = ticketContext.getTicket();
                    ticketState = ticket.getTicketState();
                    if (ticketState.getAuthenticationMethod().equals("authn/Duo")) {
                        authn_method.addValue(“duo-two-factor");
                    }
                }
            }

...which doesn’t work.  The TicketState only captures the most recent authn method which will always be
authn/MFA in my case.

//
John Pfeifer
Division of Information Technology
University of Maryland, College Park