donotcache and forceAuthn

[Manuel Haim]

On 15.08.2015 01:24, Cantor, Scott wrote:
> On 8/14/15, 7:01 PM, "users on behalf of Jeffrey Crawford" <users-bounces at shibboleth.net on behalf of jeffreyc at ucsc.edu> wrote:
> 
>> Okay sorry I reread you response, Basically all I'm asking is that if an SP requests forceAuthn we have a way to see that in the login.vm template, that way we can remove the checkbox to set
>> donotcache since it's an irrelevant option for a forceAuthen service
> 
> Except it's *not* irrelevant. You do have a way, but that wouldn't make sense. The caching option affects what happens on the *next* request, not the one you're processing at the time ForceAuthn would be present.
> 
> -- Scott
> 

Hi,

in IdP 3.3.1, it seems you can only change behaviour from "donotcache"
to "cache", but not the other way round.

Just filed a bug:
https://issues.shibboleth.net/jira/browse/IDP-1207

-Manuel