In the following post Conditionally force login with SAML connections, it is mentioned that ForceAuthn: true can be set on a specific SAML connection, to force login prompt every time the user goes to the upstream IdP. However, I couldn’t find any docs mentioning this other than this one post
Is it possible to set ForceAuthn: true for a specific SAML connection, to make all SAML requests have it?
That post is correct, you can set ForceAuthn: true in the SAML Request template to force login prompt every time the user goes to the upstream IdP. Our docs page with all the template variables has not yet been updated with this, but it will still work.