# Force user to enter their password in external IDP

**URL:** <https://community.auth0.com/t/force-user-to-enter-their-password-in-external-idp/190463>\
**Category:** Get Help\
**Tags:** identifier-first, login-experience\
**Created:** [August 11, 2025, 7:15pm UTC](https://community.auth0.com/t/force-user-to-enter-their-password-in-external-idp/190463 "2025-08-11T19:15:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ddasil41](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ddasil41/32/74493_2.png) [@ddasil41](https://community.auth0.com/u/ddasil41)\
**Post date:** [August 11, 2025, 7:15pm UTC](https://community.auth0.com/t/force-user-to-enter-their-password-in-external-idp/190463/1 "2025-08-11T19:15:58Z")

</div>

We have this use case that, for a specific app, we must force the user to type their Username and Password at External IDP (EntraID) level almost like a “e-signature”

Our Auth0 is federated in EntraID and the users are authenticating correctly in Entra. The issue, when the application restart the authentication process, the Auth0 is doing SSO with Entra and not prompting for user’s credentials.

How can I force Auth0 to prompt to user credentials in Entra in this scenario?

Thanks

---

<div class="post-metadata">

**Author:** ![nik.baleca](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nik.baleca/32/68749_2.png) [@nik.baleca](https://community.auth0.com/u/nik.baleca)\
**Post date:** [August 12, 2025, 7:23pm UTC](https://community.auth0.com/t/force-user-to-enter-their-password-in-external-idp/190463/3 "2025-08-12T19:23:06Z")

</div>

Hi @ddasil41

Welcome to the Auth0 Community!

From what you are describing there, it appears that you need to perform a [Federated Logout](https://auth0.com/docs/authenticate/login/logout/log-users-out-of-idps) in your specific scenario. Usually, when a user is logged out or their session is terminated, only the session with Auth0/your application will cease to continue while their other sessions (social connections/enterprise connections) would remain connected. In order to force re-authentication, you would need to perform a federated logout(if the IdP supports it) or redirect the user to the `/logout` endpoint of the IdP as well.

If you have any other questions, let me know!

Kind Regards,  
Nik

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [August 26, 2025, 7:23pm UTC](https://community.auth0.com/t/force-user-to-enter-their-password-in-external-idp/190463/4 "2025-08-26T19:23:14Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
