ELException on IdP 4.0.1

[Cantor, Scott]

On 11/25/20, 12:03 PM, "users on behalf of Ramon Pfeiffer" <users-bounces at shibboleth.net on behalf of ramon.pfeiffer at uni-tuebingen.de> wrote:

>    Changing the id of my interceptor bean from 
>    "shibboleth.context-check.Condition" to 
>    "shibboleth.context-check.Function" and returning "proceed" or 
>    "ContextCheckDenied" as applicable resolved this issue.

That is the advised way. The Condition support in that feature is purely for compatibility, once it was generalized, it's always preferable to just do that so you don't have to go change it later when use case #2 appears.

>    For my understanding, is it possible to use an inline script for a 
>    Condition that returns just a boolean value true or false?

Yes, as long as the eventual consumer of the object expects it to be one. The docs for any built-in beans or reserved names will document which it has to be.

-- Scott