donotcache and forceAuthn

[Cantor, Scott]

On 8/14/15, 6:37 PM, "users on behalf of Jeffrey Crawford" <users-bounces at shibboleth.net on behalf of jeffreyc at ucsc.edu> wrote:

>There was a question around our campus regarding if it was possible to have the login page logic know if an SP requests forceAuthn and allow the login page not show the section of the form which sets donotcache. I didn't find anything however I'm sure I could have missed it as well.

If an SP requests ForceAuthn, the form would be used, but remembering the result after that is relevant for the following requests, not that one. So there is by definition nothing it could look at. Whether *that* request included it would have nothing to do with the decision to remember it for the next SP.

Or perhaps I'm not following your line of thought.

-- Scott