Is there a way to set SAML Response status code to 'RequestDenied'

[Supakit Kiatrungrit]

Hi,

We are working with one of the vendor that asking us to send the SAML Response message with Status Code as  'urn:oasis:names:tc:SAML:2.0:status:RequestDenied’

Is there any way to set the status code to RequestDenied if certain attribute of the users doesn’t meet the requirement?

The attribute-filter rule still set the status code as ’Success' with Empty attributes to SP if user attribute doesn’t meet the filter rule.

Thank you so much for your help,
Nat
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140207/d548256f/attachment.html