ForceAuthn based on IDP entityId

[Cantor, Scott]

On 2/10/21, 10:52 PM, "dev on behalf of Dan McLaughlin via dev" <dev-bounces at shibboleth.net on behalf of dev at shibboleth.net> wrote:

>    Is there a way to configure the SP so ForceAuthn=true only for
>    specific IDP's?    The use case is we want to allow SSO for our
>    internal IDP only, but for all other external IDP's we want
>    ForceAuthn=true.

No, but the documentation says authnContextClassRef and NameIDFormat are customizeable, which means it's looking at the RelyingParty elements when it issues AuthnRequests. So I suspect it could and just isn't.

-- Scott