Disallow eppn/affiliation to be asserted by the wrong IdP

[Ian Young]

On 11 Oct 2012, at 12:09, William Spooner <william.spooner at eaglegenomics.com> wrote:

> I want to do exactly this, i.e. disallow "staff at osu.edu to be asserted by the Brown University IdP". Although I'm already doing this within my application, it would be great to hand the task off to my SP (shibboleth 2.4.3). I would be very grateful if someone could point me towards some boilerplate config for this.

This is the default behaviour, there's no need to do anything special.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20121011/8b352537/attachment.bin