On 21.08.2017 22:00 Cantor, Scott wrote: > I'll probably throw in a default conditional that suppresses the box if ForceAuthn is set Thanks for the tip. This can be easily solved in IdP 3.3.1 by putting this code around the donotcache checkbox in the login.vm template: #if (!$authenticationContext.isForceAuthn()) ... #end Kind regards, Manuel