IdP v3 intercept flow that restricts /some/ users

[Cantor, Scott]

On 7/15/15, 4:03 PM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

>So this?
>
>
><bean parent="shibboleth.Conditions.RelyingPartyId">
>    <constructor-arg>
>        <bean parent="shibboleth.CommaDelimStringArray" c:_0="#{ '%{idp.friend.services}'.trim() }" />
>    </constructor-arg>
></bean>

I imagine that's back to breaking because of the second constructor (i.e. it's setting up a condition of "false"). You should still specify the argument name (candidates IIRC?) to make sure it's picking the right one. We have the bug filed to make that work better somehow.

-- Scott