Authorization shibboleth.context-check.Condition

[Joshua Brodie]

My apologies -- this is testing my limits....on Shibboleth and other
concepts..

Do you mean something like the below?


<bean id="shibboleth.context-check.Condition"
parent="shibboleth.Conditions.AND">
        <constructor-arg>
            <list>
                <bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{ 'https://sp.example.org' }" />
                <bean parent="shibboleth.Conditions.OR">
                <constructor-arg>
                <bean
class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"
                        p:useUnfilteredAttributes="true">
                    <property name="attributeValueMap">
                        <map>
                            <entry key="eduPersonEntitlement">
                                <list>
                                    <value>(
https://example.edu/employee/active)</value>
                                </list>
                            </entry>
                        </map>
                    </property>
                </bean>
                <bean
class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"
                        p:useUnfilteredAttributes="true">
                    <property name="attributeValueMap">
                        <map>
                            <entry key="memberOf">
                                <list>
                                    <value>adhoc,ou=example,ou=edu</value>
                                </list>
                            </entry>
                        </map>
                    </property>
                  </bean>
                  </constructor-arg>
                </bean>
            </list>
        </constructor-arg>
    </bean>

On 23 June 2017 at 12:58, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/23/17, 1:36 PM, "users on behalf of Joshua Brodie" <
> users-bounces at shibboleth.net on behalf of josbrodie at gmail.com> wrote:
>
> > Would you have any suggestion on how to leverage the OR scenario?
>
> Sorry, I assumed that was clear, just wrap two instances of the predicate
> class in another OR.
>
> > Not too sure if that is the best way forward?
>
> I probably would, but you can do it either way.
>
> -- Scott
>
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170623/140e358d/attachment.html>