donotcache and forceAuthn

[Manuel Haim]

On 23.08.2017 09:05 Manuel Haim wrote:
> #if (!$authenticationContext.isForceAuthn())

Sorry, this was only half the solution. Seems we also need to look for a
not-yet-established IdP session in login.vm (in order to always show the
box at first login):

#set ($idpSession =
$profileRequestContext.getSubcontext('net.shibboleth.idp.session.context.SessionContext',
true).getIdPSession())

#if (!$idpSession || !$authenticationContext.isForceAuthn())
  ...
#end
Kind regards,
Manuel