Syntax for activation condition

[Lalith Jayaweera]

Thanks Scott

now below works

<bean parent="shibboleth.SAML2PersistentGenerator">
    <property name="activationCondition">
    <bean id="MyCondition" parent="shibboleth.Conditions.NOT">
 <constructor-arg>
     <bean id="MyCondition2" parent="shibboleth.Conditions.RelyingPartyId">
        <constructor-arg name="candidates">
         <list>
            <value>urn:sample2:sample2</value>
            <value>urn:sample1:sample1</value>
        </list>
      </constructor-arg>
    </bean>
 </constructor-arg>
    </bean>
    </property>
</bean>

but below does not work (NOT condition not evaluating)

<bean parent="shibboleth.SAML2PersistentGenerator">
    <property name="activationCondition">
    <bean id="MyCondition" parent="shibboleth.Conditions.NOT">
     <constructor-arg>
     <bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{{'urn:sample2:sample2','urn:sample1:sample1'}}" />
      </constructor-arg>
    </bean>
    </property>
</bean>


I am unclear as to what the difference between these two.....I encountered
before as well, that, only inline constructor works....basically as a need
I dont need,SAML2PersistentGenerator been applied to listed relyingParties,
as SAML2AttributeSourcedGenerator defined for those two relyingParties.



On Thu, Jun 29, 2017 at 11:53 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/28/17, 9:35 PM, "users on behalf of Lalith Jayaweera" <
> users-bounces at shibboleth.net on behalf of ljayaweera at gmail.com> wrote:
>
> > Now I got two relyingParties satisfying above, so I changed above to
> below, but below does not work when it passe the nameID,
> > as if like NOT condition not getting evaluated.
>
> Then it's not the policy that you think you want, but it's generally
> possible to apply a negation like that.
>
> > Also isnt something like below possible (inline constructor)? below
> failing at startup....
>
> You left out the constructor-arg around the NOT bean's argument.
>
> -- Scott
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170629/49ad3893/attachment-0001.html>