Disable SSO for Specific SP?

[Tunturi Timo]

On 23/03/17 17:23, Cantor, Scott wrote:
>> I figured I'd check to see if this has since changed, in light of the
>> recent changes in the IDP?
> 
> No, nor has anybody requested such a feature.

It's a shame, because it (enforcing forceAuthn from the IdP side for 
specific SPs) would really be a useful feature.

The use case is to allow a only a specific authentication method (2FA) 
for some SPs. Unfortunately there are a lot of poor SAML2 
SP-implementations out there that are serious lacking in features.

-- Timo Tunturi / Aalto University IT Services