IDP controlling access to SPs based on user attribute

[Cantor, Scott]

> But, when I just take the existing example and edit it slightly for our
> environment, I'm not seeing any conditions being applied against the
> attribute values.  I don't see anything in the logs regarding the intercept
> either.  (I'm also not sure which class to increase the logging for)

I doubt it logs much but the most likely mistake is if you didn't actually enable that interceptor in an applicable relying party override, in which case it wouldn't log anything anyway.

-- Scott