Ex: Re: Multiple LDAPs and Research Services

[Paul B. Henson]

On Mon, Oct 23, 2023 at 06:23:36PM -0400, Janemarie Duh wrote:

> Thanks for the input. Right, that's been my experience - anyone with
> valid credentials is able to auth using the IdP. Good point and one I
> hadn't thought of.

Eventually you'll have some service which takes all comers and expects
the idp not to send people who shouldn't be there 8-/. The easiest way
to handle that is in the context check intercept. We have it set up to
redirect people who try to access services they don't have access to to
a custom page telling them to contact either the people who own the
service or more generically our service desk.


-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768