Shibboleth Developers

[André Cruz <>]

On Feb 26, 2009, at 13:17 , Chad La Joie wrote:

> Peter Schober wrote:
> > * Chad La Joie 
> > <>
> >  [2009-02-26 13:58]:
> > > forceauthn is a joke with anything other than OTP the like.
> >
> > Are you referring to this specific case or to forceAuthn in general?
>
> forceAuthn in general.  Most people, I suspect, think this means the
> user actually authenticated again.  However, a huge number of users  
> save
> username/passwords in their browsers or use some plugin so that they
> don't have to re-enter this information.

No. Most people think this means that the probability of the user  
being who he says he is is bigger.

If the user elected to save the password then it's probably not a  
public computer. Other people here trust the user to close their  
browser when they want to logout... User's have to have some  
responsibility for their security.

André