search

firebase / firebase-js-sdk

Firebase Javascript SDK
https://firebase.google.com/docs/web/setup
Other
4.85k stars 893 forks source link

FR: Support for ForceAuthn flag in the SAML AuthnRequest #4020

Open krymen opened 4 years ago

krymen commented 4 years ago

[REQUIRED] Describe your environment

[REQUIRED] Describe the problem

We want to be able to pass ForceAuthn as an attribute for the AuthnRequest when signing in users with SAML (https://cloud.google.com/identity-platform/docs/web/saml). The goal is to notify the IdP to not use any previous security context when authenticating the user.

As per https://wiki.shibboleth.net/confluence/display/SP3/ForceAuthn:

SAML includes an optional feature during login requests called ForceAuthn that acts as a signal to the Identity Provider to require some form of user interaction during the course of handling the request, overriding the usual implicit assumption that it's acceptable to reuse authentication state from an earlier request (i.e., Single Sign-On).

malcolmdeck commented 4 years ago

Hey there! I've filed b/172259671 to track this feature request internally :)

paulyoung5 commented 2 years ago

any updates on this issue? 🙇 it doesn't seem possible to force user account selection / re-consent for SAMLAuthProvider at the moment (as you can with google / oauth prompt: select_account custom parameter)

cdgco commented 1 year ago

Any update here? Would love to be able to force account selection with SAML providers.

renkelvin commented 1 year ago

Thanks for reporting this. Please plus one if you need this feature, which will help us prioritizing.

marcwsnc commented 1 year ago

Hi - this is very important to us as an organization. Is there any update on this issue? How can this be prioritized? This issue is three years old by now. Very frustrated. @renkelvin

antarticuno commented 1 year ago

This feature is greatly desired for my organization as well - we're working with some IdP's that have long-lived security contexts and it would be essential to force reauthentication for SAML providers.

simon-perez-crio commented 1 year ago

Is there any update on this issue? It is causing some significant issues for our organization and clients.

wieringen commented 1 year ago

This problem is very confusing for our users.

Stofkat commented 9 months ago

Any news on this? The issue has been open for nearly 3.5 years now.

stnrd commented 9 months ago

Any updates on this?