Triggering SP error page / restrict access to a list of users

[Manuel Haim]

> Why would you prefer the SP's 403 error page to httpd's or your own,
> generated directly from the application?
> -peter

@Peter: we currently have a customized set of templates for our SPs,
reflecting the layout of our IdP pages. These templates also contain a
consistent menu of links and offer some help regarding Shibboleth, so
the idea was to show the SP's "access denied" page rather than a page
generated by the application. It also may be confusing if there are two
"access denied" pages (one by the SP, one by the application).

We will have a thought on calling the web server's 403 error page and
maybe have a look at the GMT tool you mentioned.

@Scott: Thank you for clarification on the SP features.