Refusing to send an assertion if attribute not present?

[Tom Scavo]

On Tue, Mar 12, 2013 at 5:52 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> If you want UI control post-authentication, you would need a custom login
> handler, there is no such hook in V2.

Unicon has developed a post-login handler for Shib IdP v2:

Slide decks from I2 Member Meeting:
http://events.internet2.edu/2011/fall-mm/agenda.cfm?go=session&id=10001976&event=1148

1) IdP/SWF integration
https://github.com/dima767/Shibboleth-IDP-Postlogin-Filter

2) SWF that inplements
https://github.com/dima767/Shibboleth-IDP-Postlogin-Flow

I've looked at this and I hope to use this work in my own IdP at some point.

Tom