EntityIDs in Flow-Intercept-Allowed-Beans - Restart?

[Cath Messner]

Hi Scott:

>Use EntityAttributes/tags and base the condition on that.

Would there be intro level 101 available any where? The Shibboleth Wiki doc
were at  a level above my knowledge.

How could I transpose the 'c:candidates' to Entity/Tags?


/flows/intercept/admin-allowed/admin-allowed-beans.xml

<bean
class="org.springframework.context.support.PropertySourcesPlaceholderConfigurer"
        p:placeholderPrefix="%{" p:placeholderSuffix="}" />

    <bean
class="net.shibboleth.ext.spring.config.IdentifiableBeanPostProcessor" />
    <bean
class="net.shibboleth.idp.profile.impl.ProfileActionBeanPostProcessor" />

    <bean id="ContextCheckPredicate" parent="shibboleth.Conditions.AND">
        <constructor-arg>
             <list>
                 <bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{{'https://abc','https://def','https://xyz''}}" />
                 <bean
class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"
                         p:useUnfilteredAttributes="true">
                          <property name="attributeValueMap">
                       <map>
                           <entry key="AdminACL">
                               <list>
                                   <value>1</value>
                               </list>
                           </entry>
                       </map>
                     </property>
                  </bean>
             </list>
</constructor-arg>
    </bean>

</beans>


On Mon, Sep 21, 2020 at 5:08 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 9/21/20, 3:07 AM, "users on behalf of Cath Messner" <
> users-bounces at shibboleth.net on behalf of cathm8009 at gmail.com> wrote:
>
> >    For the  flow-Intercept-Allowed-Beans -- can the EntityIDs be changed
> without requiring a restart?
>
> Yes, by not doing it that way. Use EntityAttributes/tags and base the
> condition on that.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200925/a4a9294b/attachment.htm>