Give the Engineering group an "engineering" attribute, and the sales folks a "sales" attribute at the IdP. On the SP side require one or the other for authz. <br><br>Yaowen Tu <yaowen.tu@gmail.com> wrote:<br><br>Suppose <br>1. I have an IdP that connect to a LDAP.<br>2. I am using OOTB edu.vt.middleware.ldap.jaas.LdapLoginModule to do the real authentication.<br>3. The LDAP has two groups e.g. Engineering and Sales<br>4. There are two SPs that connect to this IdP.<br>
<br>Is it possible or how to support: Allow Engineering users to login to SP1 and Sales users to login to SP2?<br><br>If it is not possible to do this through IdP, anyone know what is the standard way to achieve it?<br><br>
Thanks,<br clear="all">Yaowen<br>