how to deny acces to a SP based on attribute value

[Peter Schober]

Guillaume Rousse via users <users at shibboleth.net> [2025-12-12 17:53 CET]:
> You may also consider web-server access control, as documented here:
> https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335056/htaccess#Requiring-students-from-particular-domains

Clearly implementing authorisation at the SP-side is generally
recommended but since this question was solely about the IDP I'm
guessing the SP does not cooperate sufficiently and/or the IDP
organisation has some special requirements of its own.

-peter