Hi, > I want to restrict which users' attributes I release: I don't > want the SP to be able to have access to attributes of any users other than > those that have been centrally approved to use the SP. You sure will configure this at the IdP. Kind regards.