Switching the user in the same SSO session

[Cantor, Scott]

On 8/15/13 11:21 AM, "Douglas E. Engert" <deengert at anl.gov> wrote:
>
>Could you have the SP force re-authentication for the transaction?
>
>https://wiki.cac.washington.edu/display/infra/Configure+a+Service+Provider
>+to+Force+Re-Authentication

Doesn't change this, there's still only one session including both
identities. The current code made the decision to deal with disparate
technologies involved in a login by assuming no identity switching is
allowed (but compounds that problem by not allowing it to error out).

If you don't want that behavior, you have to turn off the existing session
mechanism and substitute a different one.

-- Scott