ELException on IdP 4.0.1

Cantor, Scott cantor.2 at osu.edu
Wed Nov 25 17:11:31 UTC 2020

On 11/25/20, 12:03 PM, "users on behalf of Ramon Pfeiffer" <users-bounces at shibboleth.net on behalf of ramon.pfeiffer at uni-tuebingen.de> wrote:

>    Changing the id of my interceptor bean from 
>    "shibboleth.context-check.Condition" to 
>    "shibboleth.context-check.Function" and returning "proceed" or 
>    "ContextCheckDenied" as applicable resolved this issue.

That is the advised way. The Condition support in that feature is purely for compatibility, once it was generalized, it's always preferable to just do that so you don't have to go change it later when use case #2 appears.

>    For my understanding, is it possible to use an inline script for a 
>    Condition that returns just a boolean value true or false?

Yes, as long as the eventual consumer of the object expects it to be one. The docs for any built-in beans or reserved names will document which it has to be.

-- Scott

More information about the users mailing list