IdP 3.0 Forced authentication with external authentication

[Nanda Kumar]

Hi,
  I am trying to get forced authentication to work with an external authentication mechanism.  I followed
https://wiki.shibboleth.net/confluence/display/IDP30/ExternalAuthnConfiguration
but couldn't find much information on how to do it.

I added the following to the general-authn.xml file

        <bean id="authn/External" parent="shibboleth.AuthenticationFlow"
            p:nonBrowserSupported="false" p:forcedAuthenticationSupported="true" />


When I try logging in to two different SP's in two different tabs of the browser window, it is letting the second one go through without prompting for authn.

During authentication in to the second SP, control was never returned to my servlet used for external authentication.

Any pointers in the right direction to configure this  will be very helpful.

Thanks
Nanda
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161003/944ada41/attachment.html>