Authenticated memberof group

[Cantor, Scott]

On 5/3/17, 4:30 PM, "users on behalf of Daniel McDonald" <users-bounces at shibboleth.net on behalf of daniel.mcdonald at umb.edu> wrote:

> Right now I have this as my CDATA section within my DataConnector which successfully matches on the mail attribute.

That's not about authentication, so you're still going about this wrong.

> This is successfully authenticating:

No, it's successfully getting attributes (or not).

> I tried this next line but it didnt seem to work, users not in the group are able to login:

Because that has nothing to do with authentication, that's happening afterwards. It presupposes authentication happened (excepting attribute queries, but leave that aside).
 
-- Scott