IssueTracker

A short description of the request:
We want to be able to pass ForceAuthn as an attribute for the AuthnRequest when signing in users with SAML (https://cloud.google.com/identity-platform/docs/web/saml). The goal is to notify the IdP to not use any previous security context when authenticating the user.

What is the purpose of this new feature?
At Waitwhile (https://waitwhile.com/) we've recently introduced SAML SSO authentication. More and more customers want it enabled. To comply with their security requirements they require to always prompt force authentication -- the user always needs to provide their credentials regardless of whether they're authenticated on the IdP end or not.

There is also another issue on supporting ForceAuthn (https://issuetracker.google.com/issues/169249669). It's about introducing it in GSuite IdP though.