IDP controlling access to SPs based on user attribute

[Ho, PeiQuan]

How do I enable the interceptor?  I have this in the relying-party.xml file.

        <bean parent="RelyingPartyByName" c:relyingPartyIds="#{{
                'https://tufts-test.webex.com'
                }}">
            <property name="profileConfigurations">
                <list>
                    <bean parent="SAML2.SSO" p:encryptAssertions="false"
        p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
                </list>
            </property>
        </bean>

Thanks,
-PQ

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, October 31, 2016 4:22 PM
To: Shib Users
Subject: RE: IDP controlling access to SPs based on user attribute

> But, when I just take the existing example and edit it slightly for our
> environment, I'm not seeing any conditions being applied against the
> attribute values.  I don't see anything in the logs regarding the intercept
> either.  (I'm also not sure which class to increase the logging for)

I doubt it logs much but the most likely mistake is if you didn't actually enable that interceptor in an applicable relying party override, in which case it wouldn't log anything anyway.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net