Redirect to custom URL when AttributeFilterPolicy in IdP does not met

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2014-01-24 02:17]:
> You should avoid doing this. The IdP is an authentication service,
> it's not the proper role of it to make final authorization
> decisions.

Have a look at this email from Bill Thompson (via Keith):
http://marc.info/?l=shibboleth-users&m=133891732328004
That sounds like it could be of help, though the referenced Github
repositories do not exist anymore.
-peter