"Don't Remember Login" on example login page

[Cantor, Scott]

> I've been trying to confirm what the "Don't Remember Login" checkbox
> which appears on the default login page is intended to do.

To be precise, it triggers a per-request flag that suppresses the storage of the AuthenticationResult into the IdPSession object. As a result, the next request doesn't see an "active" AuthenticatonResult from that flow, causing it to run again, ergo no SSO.

> Based on this thread I understand that the checkbox disables SSO between
> SPs, and my testing confirms this.

It's preventing SSO by preventing the storage of the outcome that would make SSO possible.

Login flows can manipulate a setting at runtime to tell the system what to do, meaning the checkbox is an example of something that triggers a more generally available feature buried inside the depths of the authentication interface in the system.

-- Scott