Idp - SP whitelist and state consistency

Manage must be consistent regarding the testaccepted and prodaccepted states for IDPs. This means that institutional IDPs and test IDPs are assigned the correct state for both test2, test and production environment:

The following applies to both the test environment and the production environment and must be changed in Manage:

• All institutional IDPs are assigned the ‘prodaccepted’ mode
• All test / fake IDPs (SURFconext testidp, DummyIDP) are assigned the “testaccepted” mode, except on test2 we exclude the DummyIDP as this used by developers to login to prodaccepted services
• Allow all must set to false for all identity providers
• Allow all must set to true for all service providers

Furthermore

• If a connection is created and the user did not request prodacccepted, then the connection must be added to the allowed list of the test IDPs.
• if a connection is created and the user did request prodaccepted, then the connection must be removed from the allowed list of the test IDP's