fail authentication when attribute is not available?

[Olga Terlyga]

Hello all,


This may be a very easy question I have no way of knowing.


We are running Shibboleth 3 IdP. Authentication is not ldap, but user attributes attributes are pulled from ldap (after successful authentication). Right now IdP  considers authentication successful even if not all attributes are available, it just releases whatever is available. I would like to know how to "fail" authentication when any of the attributes are not available. Please, help!


Thank you,


Olga Terlyga

Computing Services Specialist



Authentication Services

Fermi National Accelerator Laboratory

630 840 4685 office

www.fnal.gov<http://www.fnal.gov/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161116/c1900b41/attachment.html>