Can Shib 3 deny access to certain SPs based on a user attribute?

[Jessica Coltrin]

Can Shib 3 deny access to certain SPs based on a user attribute? Our use case is that we want former students who are not currently active to have access to only certain SPs and we'd like to control that with Shibboleth based in an attribute indicating status. Is this possible? If not, how do others handle this use case?

Thanks,
Jessica

Sent from my iPhone