AccessControlConfiguration - Multiple Conditions?

[Lille M]

Thank you....appreciate the direction.

1 more question -- and I may have this licked.

Can an id have 2 AdminFlows? Example:


<bean parent="shibboleth.AdminFlow"
            c:id="http://shibboleth.net/ns/profiles/status"
            p:loggingId="%{idp.service.logging.status:Status}"
            p:policyName="%{idp.status.accessPolicy:AccessByIPAddress}" />

<bean parent="shibboleth.AdminFlow"
            c:id="http://shibboleth.net/ns/profiles/status"
            p:authenticated="true"
            p:loggingId="%{idp.service.logging.status:Status}"
           p:policyName="%{idp.reload.accessPolicy:AccessByUser}" /

On Tue, Apr 30, 2019 at 5:14 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> The default value for the resolveAttributes setting on administrative
> flows is false, so I imagine the logs will show it's not doing any
> attribute lookup at all and that would prevent any checks from succeeding.
> The documentation always links to the javadocs for the beans of the types
> these files contain, you have to look at those to know what settings are
> available and what their defaults are.
>
> -- Scott
>
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190501/df6c2788/attachment.html>