Unicon/cas-mfa — pull request #48 by mmoayyed (2013-08-08 15:45:26+00:00)
Title: Mfa proxy validation

`/cas/proxyValidate` must enforce a required authn_method if one is expressed by the ticket-validating relying party, but does not currently so enforce.

It is common for CAS clients to validate service tickets against `/cas/proxyValidate'

The case of actual proxy tickets is kind of interesting -- validation should traverse back to the underlying TGT to verify that the required authn_method was fulfilled.

https://github.com/Unicon/cas-mfa/issues/41