Problem with client ip address changing

[Peter Schober]

Hei,

* Viitanen Viljo <viljo.v.viitanen at jyu.fi> [2012-11-13 15:16]:
> The current behavior is unacceptable, as the various SP's don't
> quite know what to do with a situation where they get a successful
> login without any attributes they need. I'd rather the idp to issue
> an error to the user, and not let the user proceed to SP.

Promoting updating these SP to Shib 2.5 might be a way forward, to
protect against this at the SP side. Cf. "Attribute checking" (first item):
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPInterestingFeatures
-peter