[keycloak-user] Forcing reauthentication from a client, even when session is active

[John Dennis]

On 03/06/2017 08:47 AM, John D. Ament wrote:
> Hi,
>
> I have a use case where I need to reauthenticate a client, even if their
> session is active.  I can use the Keycloak javascript adapter on the client
> side, if needed, and was wondering if this is something built in?  I was
> also expecting to leverage either the OIDC or SAML adapter on the server
> side.  Can that work, regardless or server side adapter?

In SAML you set ForceAuthn=True in the AuthnRequest.


-- 
John