When using athird-party Identity Provider (IdP)with SAML-based Single Sign-On (SSO), users might only be able to log in when connected to the Internet if theSAML single sign-on login frequencysetting is configured in a way that requires online authentication. This configuration means that users must reauthenticate against the IdP whenever they log in, rather than using cached credentials.
Verified Answer from Official Source:
The correct answer is verified from theGoogle ChromeOS SSO Configuration Guide, which specifies that configuring login frequency to "Always" forces online reauthentication.
"If the SAML single sign-on login frequency is set to 'Always', users must be online to authenticate through the third-party IdP each time they log in." To allow offline login, configure the setting to allow cached credentials, which enables users to log in even without an active Internet connection.
Objectives:
* Enable offline login for SAML-based SSO.
* Manage login frequency settings effectively.