IDP filtering SPs?

[Peter Schober]

* Bryan E. Wooten <bryan.wooten at utah.edu> [2014-06-19 23:58]:
> I swear I just some recent posts regarding filtering access to Sps
> at the Idp. Ie the SP thinks that authentication equals
> authorization so it is incumbent on the Idp to deny access.

Yes, see the recent thread on this list "Deny user to access SP via IdP?"
In that I dug up the links to the Wisconsin-Madison/Unicon extension
code that does this for IDP v2.x
-peter