Content differences:
--- /etc/cas/services/puppetboard-1.json.orig
+++ /etc/cas/services/puppetboard-1.json
@@ -1 +1 @@
-{"@class":"org.apereo.cas.services.CasRegisteredService","name":"puppetboard","serviceId":"https://puppetboard-(idp|saml)test\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":1,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org","cn=ops-limited,ou=groups,dc=wikimedia,dc=org","cn=idptest-users,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",["mfa-webauthn"]],"bypassEnabled":false,"forExecution":true}}
+{"@class":"org.apereo.cas.services.CasRegisteredService","name":"puppetboard","serviceId":"https://puppetboard-(idp|saml)test\\.wikimedia\\.org(/.*)?","attributeReleasePolicy":{"@class":"org.apereo.cas.services.ReturnAllAttributeReleasePolicy","attributeFilter":{"@class":"org.apereo.cas.services.support.RegisteredServiceReverseMappedRegexAttributeFilter","patterns":{"@class":"java.util.TreeMap","memberOf":"^cn=tools(beta)?.*,ou=servicegroups,.*$"},"excludeUnmappedAttributes":false,"completeMatch":false,"caseInsensitive":true,"order":0},"allowedAttributes":["java.util.HashSet",["cn","sn","mail","memberOf","uid"]]},"id":1,"accessStrategy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy","requiredAttributes":{"@class":"java.util.HashMap","memberOf":["java.util.HashSet",["cn=ops,ou=groups,dc=wikimedia,dc=org","cn=ops-limited,ou=groups,dc=wikimedia,dc=org","cn=idptest-users,ou=groups,dc=wikimedia,dc=org"]]}},"multifactorPolicy":{"@class":"org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy","multifactorAuthenticationProviders":["java.util.LinkedHashSet",["mfa-webauthn"]],"bypassEnabled":false,"forExecution":true,"principalAttributeNameTrigger":"mfa-method","principalAttributeValueToMatch":"mfa-gauth|mfa-webauthn"}}