Flow-Intercept-Allowed-Beans

[Cantor, Scott]

On 4/9/19, 3:50 PM, "users on behalf of Joshua Brodie" <users-bounces at shibboleth.net on behalf of josbrodie at gmail.com> wrote:

> How do I add an additional 'OR' condition for groupMembership? I.e. allow access if in eduPersonAffiliation (with values
> in list below) OR if member in a groupMembership?

We have beans defined for AND/OR/NOT that are just wrappers for those Predicate types, they just take constructor arguments of the conditions to combine. shibboleth.Conditions.AND, etc.

I can't imagine there aren't examples of them somewhere in the wiki.

But John's approach is usually better.

-- Scott