Syntax for activation condition

Lalith Jayaweera ljayaweera at gmail.com
Wed Jun 28 21:35:52 EDT 2017


Hi,

In saml-nameid.xml I got below condtion and it works

<bean parent="shibboleth.SAML2PersistentGenerator">
    <property name="activationCondition">
    <bean id="MyCondition" parent="shibboleth.Conditions.NOT">
        <constructor-arg>
            <bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidate="urn:sample2:sample2" />
        </constructor-arg>
    </bean>
    </property>
</bean>

Now I got two relyingParties satisfying above, so I changed above to below,
but below does not work when it passe the nameID, as if like NOT condition
not getting evaluated.

<bean parent="shibboleth.SAML2PersistentGenerator">
    <property name="activationCondition">
    <bean id="MyCondition" parent="shibboleth.Conditions.NOT">
     <constructor-arg>
     <bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{{'urn:sample2:sample2','urn:sample1:sample1'}}" />
      </constructor-arg>
    </bean>
    </property>
</bean>


Also isnt something like below possible (inline constructor)? below failing
at startup....

<bean parent="shibboleth.SAML2PersistentGenerator">
    <property name="activationCondition">
    <bean id="MyCondition" parent="shibboleth.Conditions.NOT">
     <bean id="MyCondition2" parent="shibboleth.Conditions.RelyingPartyId">
        <constructor-arg name="candidates">
         <list>
            <value>urn:sample2:sample2</value>
            <value>urn:sample1:sample1</value>
        </list>
      </constructor-arg>
    </bean>
    </bean>
    </property>
</bean>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170629/a4d2fba6/attachment.html>


More information about the users mailing list