IdP v3 intercept flow that restricts /some/ users

Liam Hoekenga liamr at umich.edu
Fri Jul 17 13:38:01 EDT 2015


On Wed, Jul 15, 2015 at 4:27 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> I imagine that's back to breaking because of the second constructor (i.e.
> it's setting up a condition of "false"). You should still specify the
> argument name (candidates IIRC?) to make sure it's picking the right one.


Yup.  It worked when I specified the constructor:

<bean parent="shibboleth.Conditions.RelyingPartyId">
    <constructor-arg name="candidates">
        <bean parent="shibboleth.CommaDelimStringArray" c:_0="#{
'%{idp.friend.services}'.trim() }" />
    </constructor-arg>
</bean>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150717/93a5d873/attachment.html>


More information about the users mailing list