Add documentation for force_authn configuration option

1 files changed, 15 insertions, 0 deletions

diff --git a/doc/howto/config.rst b/doc/howto/config.rst
index f9e074f6..70b3175e 100644
--- a/doc/howto/config.rst
+++ b/doc/howto/config.rst
@@ -423,6 +423,21 @@ Example::
     }
 
 
+force_authn
+"""""""""""
+
+Mandates that the identity provider MUST authenticate the presenter directly
+rather than rely on a previous security context.
+
+Example::
+
+    "service": {
+        "sp": {
+            "force_authn": True,
+        }
+    }
+
+
 idp
 """