Forced Authentication

[Peter Schober]

* krrishv <krish.v at gmail.com> [2014-01-21 19:42]:
> I use username/password login handler. But Once i login to the session, If i
> open another tab and re-enter the same login URL. I want it to ask force for
> authentication. If i can configure this in login/password handler. What do i
> need to add to the configuration.

You don't. You are not even testing forcedAuthn as you're not
involving the IdP at all in the above scenario: As long as there is a
valid session at the SP it will not send the user agent to the IdP on
each and every request (that would be pretty annoying and pointless).

Delete HTTP cookies on the SP and on the next request to the proteced
resource you'll be sent to the IDP, which is where forcedAuthn comes
into play. If forcedAuthn is part of the authnRequest and the IdP can
honor that you'll now have to authenticate again (ignoring SSO), even
if your user agent already has an SSO session with the IdP.

So again, nothing to configure.
-peter