shibboleth.Conditions.RelyingPartyId regex?

[Cantor, Scott]

It might be clarifying for me to just state in English what the point of the net.shibboleth.idp.profile.logic.RelyingPartyIdPredicate is.

It has two useful things it does:
	- walk the context tree for you to look up the RelyingParty ID so you can operate on it
	- run some condition against that ID

For the second step, you have two ways of running it (but not both):
	- give it a list of entityIDs to check against OR
	- give it a raw Predicate<String> so you can specify an arbitrary condition to check against

Your regex example is a Predicate for use with the second option.

I think you're trying to get it to do both options at once. You need two separate objects of that type for that, combined inside *another* Predicate to OR them together.

Alternatively, of course, you could build a new Predicate<String> that internally did two checks, one a regex and one against a list of names, and then plug *that* into one of these helper objects. But I don't think that's represented by an existing set of utility beans that would be usable without writing a little code.

You could even write a scripted condition that does all the string checks and plug *that* into the RelyingPartyIdPredicate bean as the "raw" condition to check.

There're lots of ways to do it, just not the one you tried.

-- Scott