Restricting access to a Service Provider on the IdP side ?
Liam Hoekenga
liamr at umich.edu
Mon Feb 13 17:25:41 EST 2017
On Mon, Feb 13, 2017 at 3:44 PM, Andrew Morgan <morgan at orst.edu> wrote:
> One other consideration - the SP may display some gibberish error message
> if no attributes are released. A nicely worded, institutionally-themed,
> error page presented by your IDP is probably a better experience for your
> users.
Agreed.
We have a couple of context checks expressly for the purpose of providing
nicer failure messages to our users.
Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170213/ae467579/attachment.html>
More information about the users
mailing list