force login failure based on attribute value

[Juan Padilla]

Is there a way to add logic in attribute-resolver (or other method) to not
send the user back to the SP on successful login if an attribute is a
certain value?

 

For example, if user is not part of an ldap group then send to an error page
instead of the service provider.

 

Thanks.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180613/86128786/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 9862 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20180613/86128786/attachment.p7s>