session tagging in shibboleth-sp - can it support network block tagging?

[don ingratta]

Does it currently support session tagging using information about the
client's network connection other than the source client IP as currently
used in consistent IP check in 2.5.3?

By other information I mean using a network block so that as along as the
client remains in this network block during their session then they are not
impacted by session tagging security features.

I'm speaking from an implementation that is using an older version 2.5.3
and I do not know if any type of session tagging security feature is still
available in 2.6.3.

If session tagging is still a feature in 2.6.3 can it support something
broader than a simple IP consistency check such as network block? If not is
there an extension point in shibboleth-sp that would allow us to replace
the consistent IP check (or current session tagging if it doesn't support a
network block) with one that supports a consistent network block?

Thanks,
Don
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171201/b8829448/attachment.html>