Is there a possibility to enforce re-authentication on important / critical user operation in the application?
In our app, the user can perform some critical operations, where we would like to enforce an re-login / re-authentication, to ensure that the right person ist behind the pc. Even though the user is authenticated via SSO, we need that the user enter his login credentials again. Beside of that we need a different expiration timer for this special operation (shorter then our default token expiration).
I know, keycloak provides a possibility to configure different authentication flows in different clients but i have no idea how to combine different clients in a single session?¿ (and if it is possible at all).
I hope, someone has an idea how we can secure such a kind of this critical operations.