Enforce log in

[jameswoodley]

I have just enabled Google login on our instance, and I'd like to enforce all users go through this path. Is it possible to log out all current users and enforce them to re-login through Google?

[ns8482e]

I guess disabling local login will do the trick

[jameswoodley]

Will users already signed in, be logged out?

[MichaelPetrinolis]

Hi, if only one external provider is configured (Google for your case), you should enable the 'Use external provider for login' (probably you have already configured the registration options) and the 'Disable local password login'. You can also reset all the users' password to null in a migration so that the local accounts can't login with local password. Perform your tests on a dev environment to check the available options.

[jameswoodley]

Will users already signed in, be logged out?

[MichaelPetrinolis]

OC uses Microsoft Identity for authentication. Check if it provides a way to invalidate the cookie per user.
Then in a migration step you could perform this action on all the users without external linked account.

[ns8482e]

When ever you make identity change to invalidate persistence cookie you need sign out user with your custom logic, You can create workflow activity that forcefully logout