<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Hello all,</p>
<p><span style="font-size: 12pt;"><br>
</span></p>
<p><span style="font-size: 12pt;">This may be a very easy question I have no way of knowing. </span></p>
<p><span style="font-size: 12pt;"><br>
</span></p>
<p><span style="font-size: 12pt;">We are running Shibboleth 3 IdP. Authentication is not ldap, but user attributes attributes are pulled from ldap (after successful authentication). Right now IdP considers authentication successful even if not all attributes
are available, it just releases whatever is available. I would like to know how to "fail" authentication when any of the attributes are not available. Please, help!</span><br>
</p>
<p><span style="font-size: 12pt;"><br>
</span></p>
<p><span style="font-size: 12pt;">Thank you,</span></p>
<p><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px"><b><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#004C97; letter-spacing:.2pt">Olga Terlyga</span></b><span style="font-size:10.0pt; font-family:"Arial",sans-serif"></span>
<p style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:"Calibri",sans-serif">
<i><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#63666A; letter-spacing:.1pt">Computing Services Specialist</span></i><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#63666A"></span></p>
<p style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:"Calibri",sans-serif">
<span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#27578C; letter-spacing:.2pt"> </span></p>
<p style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:"Calibri",sans-serif">
<span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#004C97; letter-spacing:.2pt">Authentication Services</span></p>
<p style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:"Calibri",sans-serif">
<span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#004C97; letter-spacing:.2pt"></span><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#63666A; letter-spacing:.1pt">Fermi National Accelerator Laboratory</span>
</p>
<p style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:"Calibri",sans-serif">
<span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#63666A; letter-spacing:.1pt"><span id="gc-number-4" class="gc-cs-link" title="Call with Google Voice">630 840 4685</span> office</span><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#63666A"></span></p>
<p style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:"Calibri",sans-serif">
<span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:#63666A"><a id="LPNoLP" href="http://www.fnal.gov/" style="color:rgb(5,99,193); text-decoration:underline"><span style="color:#386EFF">www.fnal.gov</span></a></span></p>
<br>
</div>
</div>
</div>
</div>
</div>
</body>
</html>