Authorization shibboleth.context-check.Condition

[Cantor, Scott]

On 6/23/17, 4:57 AM, "users on behalf of Joshua Brodie" <users-bounces at shibboleth.net on behalf of josbrodie at gmail.com> wrote:

> Have I followed good practice with 'shibboleth.context-check.Condition' as shown below -- I haven't been able to test if it works
> and suspense if this is correct (test ldap down).

The SimpleAttributePredicate class treats separate attributes as an AND (conjunction), not an OR. So no, it won't match what you wrote out in English.

-- Scott