Shibboleth IdP Removing flow authn/RemoteUser, it does not support forced authentication

[Peter Schober]

Peter Schober via users <users at shibboleth.net> [2024-11-14 19:17 CET]:
> Well, the authentication request issued by the SP specified
> ForceAuthn="1" but your IDP doesn't support that, hence the failure
> message.

Now, the more interesting part (than merely explaining what this error
means) is how to deal with that.
Since you're using an external CAS server (judging from earlier posts
to the list), maybe consider using the Shibboleth IDP's CAS support
instead. Not only can you get rid of the RemoteUser flow then, you'd
be able to get rid of an entire external SSO system.
(Why run n SSO systems if you could be running n-1?)

HTH,
-peter