On 12/18/14, 8:11 PM, "Alex Olson" <ako at byu.edu> wrote: >Understood. I’d like to avoid this if possible, but just in case, how do >we configure our IdP to refuse to send an assertion back to the SP? Use an existing extension, or build one. There is no way to do it out of the box, it was never part of the design until the next version. -- Scott