Federation Security Services Guide › Configure SiteMinder as a SAML 1.x Producer › Select Users for Which the Producer Generates Assertions › Excluding a User or Group from Access to a Consumer

Excluding a User or Group from Access to a Consumer

You can exclude users or groups of users from obtaining an assertion. This is useful if you have a large user group that should have access to a consumer, but you there is a small subset of this group that you want to exclude.

To exclude a user or group from gaining access to a consumer’s resources:

1. In the Users/Groups dialog box, select a user or group from the Current Members list.
2. Click Exclude to exclude the selected user or group.

   The symbol to the left of the user or group in the Current Members list changes to indicate that the user or group is excluded from the consumer.

   When you exclude a group from resource access, the assertion generator will not create an assertion for anyone who is a member of the excluded group.

3. Click OK to save your changes.