When checked, single sign-on is disabled: even if a CAS session is already open, the user will have to provide credentials again to confirm his identity.