Thanks for the response. So my request is how do i make forcedAuthn part of the authnRequest. SP is not shibboleth. only IDP is Shibboleth. Is there a way we can do that? -- View this message in context: http://shibboleth.1660669.n2.nabble.com/Forced-Authentication-tp2396636p7594099.html Sent from the Shibboleth - Users mailing list archive at Nabble.com.