Box.com Preventing users from logging in

[Rhian Resnick]

Afternoon,


While setting up saml2 authentication (incommon) with Box.com we have run into an issue. They state they are unable to restrict who can create an account based on a attributes and that we must restrict the users that our IDP sends to them.


For instance users in group "A" are allowed to log into Box so we will present all other users with an authentication error at the IDP.


Has anyone setup these type of limitations with the 3.x IDP?


Rhian Resnick

Assistant Director Middleware and HPC

Office of Information Technology


Florida Atlantic University

777 Glades Road, CM22, Rm 173B

Boca Raton, FL 33431

Phone 561.297.2647

Fax 561.297.0222

 [image] <https://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160722/395f4fe1/attachment.html>