RE: [saml-dev] ForceAuthn in SSO and user changes NameID

> I would like to understand the expected behaviour when an SP uses
ForceAuthn
> and the user logs in at the IdP with a different userid than was used
> previously in response. What should happen?

The notion of a session at the IdP is out of scope, so I don't think there
are any SAML-driven answers to these questions.

> *	Is the behaviour variable and up to the IdP. (i.e. SAML just doesn't
> want to talk about this)

Can't talk about it, IMHO, per the above.

-- Scott