public boolean isAllowedToBypass() {
            return this == MultifactorAuthenticationProviderFailureModes.OPEN
                   || this == MultifactorAuthenticationProviderFailureModes.PHANTOM;
        }
The default one indicating that no failure mode is set at all.
api/cas-server-core-api-configuration-model/src/main/java/org/apereo/cas/configuration/model/support/mfa/BaseMultifactorAuthenticationProviderProperties.java