<div dir="ltr"><div>Thanks to all for your helpfulness and the thorough analisys!<br></div><div>We need to send just the user-mail attribute and will follow Jan's way (not having activated the backend channel makes it quite straightforward). It's OK for us if the SP gives a generic error.<br>
<br></div><div>It'd be very nice though if a future version of the IdP could do this out of the box, maybe with a couple of new elements in the relying-party.xml configuration file to indicate the "allowed IP range" and the customizable "you're not allowed to authenticate" page.<br>
<br></div><div>Best,<br></div><div>Stefano<br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 22, 2013 at 4:03 PM, Manuel Haim <span dir="ltr"><<a href="mailto:haim@hrz.uni-marburg.de" target="_blank">haim@hrz.uni-marburg.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Douglas,<br>
<br>
Am 22.08.2013 15:47, schrieb Douglas E. Engert:<br>
<div class="im">> Thanks, this might solve my problem.<br>
> <a href="http://shibboleth.1660669.n2.nabble.com/Restricting-Authentication-to-a-subset-of-Users-td6375260.html" target="_blank">http://shibboleth.1660669.n2.nabble.com/Restricting-Authentication-to-a-subset-of-Users-td6375260.html</a><br>
><br>
> Will have to take a look.<br>
<br>
<br>
</div>you are welcome!<br>
<div class="HOEnZb"><div class="h5"><br>
-Manuel<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>