The configuration of google authentication module for MFA in WA cannot be refreshed today when settings change such as window-size, time-step, etc. This is because the bean definition in WA/CAS that is built based on such settings is not marked as RefreshScope, because the implementation class for the GoogleAuthenticator component in WA/CAS belongs to a 3rd party library that has marked the class as final. Final classes cannot be proxied via RefreshScope.
Changes mainly will be done in CAS to find a workaround to mark the GoogleAuthenticator bean with RefreshScope. When done, WA will receive the fix for free automatically.
Also other beans in the same module should be reviewed to make sure all required beans can be reloadable.