Shibboleth Developers

[Peter Schober <>]

* Scott Cantor 
<>
 [2009-12-11 16:19]:
> The SP has only limited options with regard to error handling, and I welcome
> suggestions on improving it, but in general if you need to handle SAML error
> conditions gracefully, you would use the option to redirect to a custom page
> on errors and respond dynamically instead of via a static template.

It seems to me the case of failing IP "auth" is not really an
exceptional one when using IP "auth", so doing something similar to
handling those unsuccessful isPassive responses would probably make
deploying IP-auth possible without resorting to scripting.
Or is the problem then that the SP should know to invoke the
accessDenied template?
-peter