Blocking a service provider

[Gary Walton]

Hi

I have a need to block a Service Provider and would like to know how.

I have tried the following with various attribute ID to no avail

<AttributeFilterPolicy id="DoNotReleaseToASP">
    <!--
       Do not release to ASP
    -->
    <PolicyRequirementRule xsi:type="basic:NOT">
        <basic:Rule xsi:type="basic:AttributeRequesterString" value="entity ID" />
    </PolicyRequirementRule>


    <AttributeRule attributeID="transientId">
        <PermitValueRule xsi:type="basic:ANY" />
    </AttributeRule>

The attribute we release are:

affiliation:
entitlement:
eppn:
persistent-id:
targeted-id:
unscoped-affiliation:

and I believe I need to stop them being release to one Service Provider

How can I do this and how can I test it.

Thanks

Gary

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160224/7385b2da/attachment.html>