Restricting access to a Service Provider on the IdP side ?

[Patrick Rynhart]

Hi all,

We've got a Service Provider that is currently available to all members 
of our organisation, but we want to restrict it to only members of a 
particular LDAP group.  We have tried working with the provider, but 
they don't support an attribute that could be disallow access at there end.

Is there anyway that we can "block" access from our end (i.e. the IdP) ? 
  If so, how do we go about it ?

With Thanks in Advance

Patrick Rynhart

-----

Patrick Rynhart | Systems Engineer (Technical Applications)
Information Technology Services, Massey University
Private Bag 11-222, Palmerston North 4442, New Zealand
Ph +64 6 356 9099 extn 83605|Email p.rynhart at massey.ac.nz