Can Shib 3 deny access to certain SPs based on a user attribute?

[Pete Birkinshaw]

Hi,

You’re probably already giving your active students an eduPersonScopedAffiliation attribute with values of something like "student at pdx.edu" and "member at pdx.edu”. 

For students who have left, stop giving them those attributes and give them “alum at pdx.edu” instead, then configure your restricted SPs to block access to alumni.


Pete