Force external IDP based on user attribute

[Stéphane Delcourt]

Hello All,

I'm using cas 6.5 and I would like solve this scenario:
User can login by ldap password OR with external IDP.
But, if the user authenticate with ldap AND attribute resolution shows me he's en employee for example, I would like to force him through external IDP.

And I would like to have this config global, not service wide.

Any idea how to do this ?

Regards

Stéphane