Attribute checking based on sp location

[SAMUELE RILLI]

Hi,
I set up a Shibboleth SP 2.5.4.
I need to protect some sp locations by doing attribute checking (and
eventually removing the session), but I need to check different attributes
and different values according to specific sp locations.
For example, /account location may be accessed by any logged user, but
/admin must be accessed only by a logged user with specific attribute(s).

However, as far as I can understand, AttributeChecker handler and
sessionHook allow me to remove the session with flushSession, but they
always check all the attributes no matter the location.
Is it possible to specify different rules for different locations
with AttributeChecker? Alternatively, a custom sessionHook could enable me
to do that?

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161014/f5156a9f/attachment.html>