EntityIDs in Flow-Intercept-Allowed-Beans - Restart?

[Cath Messner]

Thanks :)

That was a great guidance. Using the below as an analogy.

<bean id="MyCondition" parent="shibboleth.Conditions.RelyingPartyId">
    <constructor-arg name="candidates">
        <list>
            <value>https://sp.example.com/shibboleth</value>
            <value>https://another.example.com/shibboleth</value>
        </list>
    </constructor-arg>
</bean>

I could have 'MyConditions'  in as the 'c:candidates="#{{'https://abc','
https://def','https://xyz''}}" />' -- so it will appear as following?

/flows/intercept/admin-allowed/admin-allowed-beans.xml

<bean
class="org.springframework.context.support.PropertySourcesPlaceholderConfigurer"
        p:placeholderPrefix="%{" p:placeholderSuffix="}" />

    <bean
class="net.shibboleth.ext.spring.config.IdentifiableBeanPostProcessor" />
    <bean
class="net.shibboleth.idp.profile.impl.ProfileActionBeanPostProcessor" />

    <bean id="ContextCheckPredicate" parent="shibboleth.Conditions.AND">
        <constructor-arg>
             <list>
                 <bean parent="shibboleth.Conditions.RelyingPartyId"
c:candidates="#{{'MyConditions'}}" />
                 <bean
class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"
                         p:useUnfilteredAttributes="true">
                          <property name="attributeValueMap">
                       <map>
                           <entry key="AdminACL">
                               <list>
                                   <value>1</value>
                               </list>
                           </entry>
                       </map>
                     </property>
                  </bean>
             </list>
</constructor-arg>
    </bean>

</beans>

On Fri, Sep 25, 2020 at 8:27 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 9/25/20, 10:57 AM, "users on behalf of Cath Messner" <
> users-bounces at shibboleth.net on behalf of cathm8009 at gmail.com> wrote:
>
> >    Would there be intro level 101 available any where? The Shibboleth
> Wiki doc were at  a level above my knowledge.
>
> Then I imagine that I can't really help you, but the ActivationConditions
> page includes a " Relying Parties By Tag" example that demonstrates the
> syntax for a condition based on an EntityAttribute using the Research and
> Scholarship tag as an example. The example assumes you can review the
> relevant class javadocs for
> "org.opensaml.saml.common.profile.logic.EntityAttributesPredicate" to
> understand the example better and infer how to express the specific rules
> you want.
>
> I can't do examples that happen to fit everybody's needs. Even if I
> "could", I don't have time. When members ask for help with something I
> haven't done an example for, I usually produce an example to put in the
> wiki to share at that point, but I can't do that for every question on the
> list.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200925/dded44bd/attachment.htm>