Can Shibboleth IdP handle something like Domain/Group?

[Yaowen Tu]

Hi,

Suppose we have several different groups of user that protected by one
Shibboleth IdP. An SP is only allowed to work with some group.

During login, is there a way for SP to tell IdP which group it is working
with? So IdP could do proper authentication for this group of users.

First of all does SAML have such concept? If so, does our Shibboleth IdP
support this?



Thanks,
Yaowen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130702/02bf9f11/attachment.html