Hello,
We have a department with a relying party trust that they do not want to SSO. They want the user to be prompted for their password/username to verify that the logged in user is who they say they are.
the SP states that they are sending "forceauthn=true" and I have verified this, as it is in the SAML data. Is there any way to get this to work for us with IWA/WIA in place? I have exhausted all the search engine references I can find for this.
I also have the useragent strings set to allow Chrome and IE, so we definitely feel this unless we're instructing them to use firefox.