Restricting access to a Service Provider on the IdP side ?

Liam Hoekenga liamr at umich.edu
Mon Feb 13 17:25:41 EST 2017


On Mon, Feb 13, 2017 at 3:44 PM, Andrew Morgan <morgan at orst.edu> wrote:

> One other consideration - the SP may display some gibberish error message
> if no attributes are released.  A nicely worded, institutionally-themed,
> error page presented by your IDP is probably a better experience for your
> users.


Agreed.

We have a couple of context checks expressly for the purpose of providing
nicer failure messages to our users.

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170213/ae467579/attachment.html>


More information about the users mailing list