Disable SSO for Specific SP?

Cantor, Scott cantor.2 at osu.edu
Fri Apr 28 09:59:17 EDT 2017


On 4/28/17, 1:49 AM, "users on behalf of Tunturi Timo" <users-bounces at shibboleth.net on behalf of timo.tunturi at aalto.fi> wrote:

> No, nor has anybody requested such a feature.
>
>It's a shame, because it (enforcing forceAuthn from the IdP side for 
>specific SPs) would really be a useful feature.

Firstly, the MFA flow addresses this anyway, and secondly, you're regretting that nobody has aksed for a feature that you yourself have apparently not bothered to enter a RFE for?
 
> The use case is to allow a only a specific authentication method (2FA) 
> for some SPs.

That is not a use case for ForceAuthn.

-- Scott





More information about the users mailing list