IdP v3 preventing some accounts

[Cantor, Scott]

> What's the best method of filtering either the good or bad accounts?

I would imagine there are dozens. If you just want to filter them in LDAP entirely, can't you write a search filter that's pretty much arbitrary? Maybe you don't have memberOf populated, in which case it seems like you'd want to fix that anyway.

Worst case you can use the context-check profile interceptor I'm sure.

> I don't see anything obvious to go against a group, but I may be missing
> it. Or do I go down the MCB path?

Have what go against a group? I don't see what the MCB has to do with it, but there is no such thing, that's a V2 plugin.

-- Scott