Is there a way to "force" individuals to re-authenticate when they're prompted? Use case here is e-signatures on Veeva Vault. When using SSO (Salesforce being the IDP) - the signature gets placed without having to put in the credentials on Salesforce. This is because a session is already established. However, in the case of e-signatures, this is not desirable. 

Is there a workaround to this?