Forced Authentication

[Peter Schober]

* krrishv <krish.v at gmail.com> [2014-01-21 20:11]:
> So my request is how do i make forcedAuthn part of the
> authnRequest. SP is not shibboleth. only IDP is Shibboleth. Is there
> a way we can do that?

Trying yet another angle on those questions: I don't think the Shib
IdP allows to disable SSO based on the requesting SP.
But if you're only ever using a single SP with that IdP you could
deactivate the PreviousSession login handler, then you'd have an IdP
without SSO, making forcedAuthn unnecessary, I would expect.
-peter