IdP v3 preventing some accounts

[Richard Frovarp]

On 06/20/2016 04:41 PM, Cantor, Scott wrote:
>> What's the best method of filtering either the good or bad accounts?
> I would imagine there are dozens. If you just want to filter them in LDAP entirely, can't you write a search filter that's pretty much arbitrary? Maybe you don't have memberOf populated, in which case it seems like you'd want to fix that anyway.

I'm not used to doing complex search filters, so my mind didn't go 
there. I could go back to the bindSearchAuthenticator from the 
adAuthenticator and use a search filter.

>
> Worst case you can use the context-check profile interceptor I'm sure.

While the filter would be easier, I might have a usecase for that, so it 
is helpful to know.

>
>> I don't see anything obvious to go against a group, but I may be missing
>> it. Or do I go down the MCB path?
> Have what go against a group? I don't see what the MCB has to do with it, but there is no such thing, that's a V2 plugin.
>

Pretty much anything built into the LDAP chain.

The documentation on the wiki is confusing about the MCB. If there is no 
MCB, why is there a page about the MCB and how it can be configured with v3?

Thanks for the advice.