IdP v3 intercept flow that restricts /some/ users

[Liam Hoekenga]

On Wed, Jul 15, 2015 at 2:49 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> No list. The bean is the argument.
>

So this?

<bean parent="shibboleth.Conditions.RelyingPartyId">
    <constructor-arg>
        <bean parent="shibboleth.CommaDelimStringArray" c:_0="#{
'%{idp.friend.services}'.trim() }" />
    </constructor-arg>
</bean>

with
idp.friend.services = https://sp1.example.org, https://sp2.example.org


The flow bean doesn't return true even when accessed by one of the listed
SPs.

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150715/9bd6d277/attachment.html>