fail authentication when attribute is not available?

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2016-11-16 17:14]:
> Failing authentication and failing specific requests are different
> and you have to be aware of what you want.

Right, thanks for pointing that out.

> Failing authentication itself requires custom development or more
> likely would be handled with the MFA flow in 3.3.

I meant to write that failing authentication should be done by the
authentcation sytem/method used. For LDAP that might be a more complex
LDAP search filter, etc., but the OP didn't mention what specifically
they was using other than "not LDAP".
-peter