How to always require authentication for a given SP?

[Herron, Joel D]

You can set forceAuthn=”true” in the Metadata or in Relying party for the SP depending on how your consuming that SP metadata.

RP Docs: https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631681/ProfileConfiguration-Authentication

SP docs: https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2076410043/ForceAuthn

--Joel

From: users <users-bounces at shibboleth.net> on behalf of Mohamed Lrhazi via users <users at shibboleth.net>
Date: Saturday, May 7, 2022 at 9:07 AM
To: Shib Users <users at shibboleth.net>
Cc: Mohamed Lrhazi <lrhazi at cua.edu>
Subject: How to always require authentication for a given SP?
EXTERNAL EMAIL
Hello,

We have an SP that claims they cannot make their app redirect the users to our IdP logout URL, once the user logs out of their app....

Is there a way to always require authentication for a given SP ?

Thanks a lot,
Mohamed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220509/c8a5c26c/attachment.htm>