<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Our SAML client adapters have no way to force authentication, but
the server does support SAML ForceAuth=true. There's a similar
thing for OIDC.<br>
</p>
<p>You could also extend the Cookie authenticator to ignore the
cookie check if a certain client is requesting authentication.<br>
</p>
<br>
<div class="moz-cite-prefix">On 5/24/16 8:53 AM, John D. Ament
wrote:<br>
</div>
<blockquote
cite="mid:CAOqetn-aQB_aW5RZmWMfeY7QxpTHjNTnxa-h0Yz=EpcxrW8+JQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I was wondering if there was any way in Keycloak to force
the authentication of a user?</div>
<div><br>
</div>
<div>From my application, I may need a user to reverify their
credentials. They will likely already have a session with
keycloak open, but I need them to re-enter their credentials.
Is there a way to do this? Or even an API call I can make
with the user's credentials to verify them?</div>
<div><br>
</div>
<div>Likewise, I need to be able to provide a SAML
ForceAuth=true. Is this possible in Keycloak?</div>
<div><br>
</div>
<div>John</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>