Disable authentication by group.

[Peter Schober]

* Chance Cox <ccox14 at elon.edu> [2012-06-22 21:43]:
> I have Shibboleth authenticating to Active Directory and i'm trying
> to figure out a way to restrict authentication based on group
> membership. Has anyone done anything like that before?

Assuming "authenticating to Active Directory" means LDAP authN:
If you want to limit authentication to that group in all cases (i.e.,
for that IdP generally) an LDAP search filter ('userFilter' in the
VT-LDAP JAAS config) would work just fine.
-peter