Can Shibboleth IdP handle something like Domain/Group?

[Cantor, Scott]

> During login, is there a way for SP to tell IdP which group it is working with?
> So IdP could do proper authentication for this group of users.> 
> 
> First of all does SAML have such concept? If so, does our Shibboleth IdP
> support this?

No, there is no such concept unless you overload AuthnContext information to represent it.

-- Scott