Ask MY-Community
Olivier JAOUEN
Olivier JAOUEN

Reforce authentication to access federated application

Resolved

Hello,

For some sensitive applications, I would like to reforce strong authentication.

If my user is authenticated with password only, I can force step-up to authenticate him for a federation. But, if my user is already authenticated with a strong factor, is it possible to reforce authentication for a specific federation?

Thanks

Authentication, Federation
1 reply
Best reply by Olivier JAOUEN

Hello,

It is possible to force (re)authentication thanks to "forceauthn" federation's attribute set to true in the SAML request.

This attribute is Service Provider side, and will force authentication idP side, even if SSO session is active.

Regards

View original