title: ADFS 2.0 - How to block access to my RP for a specific issuer
body: <p>I currently have two relying parties (RP) configured on my adfs 2.0 server. I also have two claims provider trusts. I simply want to restrict access to the first RP if the user belongs to claims provider 1.</p>
  
  <p>Is there a claim rule I can put that would let me inspect the user's issuer and then grant access or not?</p>
  
  <p>I'm also wondering if this behavior is even acceptable in a SSO infrastructure. Should I deploy two instances of ADFS 2.0 in order to support this (one trusts claims provider 1 while the other doesn't).</p>
  
  <p>Thanks for any ideas or design inputs.</p>