Federation Security Services Guide › Configure SiteMinder as a SAML 2.0 Identity Provider › Select Users For Which Assertions Will Be Generated › Exclude a User or Group from Service Provider Access

Exclude a User or Group from Service Provider Access

You can exclude users or groups of users from obtaining an assertion. This is useful if you have a large user group that should have access to a Service Provider, but you there is a small subset of this group that you want to exclude.

To exclude a user or group from access to an Service Provider’s resources

1. In the Users/Groups dialog box, select a user or group from the Current Members list.
2. To exclude the selected user or group, click Exclude.

   The symbol to the left of the user or group in the Current Members list changes to indicate that the user or group is excluded from the Service Provider.

3. Click OK.