We have just finished setting up SAML authentication, and are controlling access through LDAP groups. Our IdP uses an LDAP filter to look up the user, and any user not in on of the groups will not be found.
As a result, if a user tries to access the tool, that is not part of one of the groups, they will get the following error message:
IDP failed to authenticate request. Status Message="Unable to provide subject and attribute info. Attribute mapping(s) failed: Mapping lookup 'FG' returned empty result. " Status Code="Responder"
I know why the user is failing to authenticate, so I want to present a more user friendly message to the user to make them aware they do not have access to the required group and point them in the direction of how to receive access. Is this possible and how would I go about it?
