shibboleth.Conditions.Scripted and User-Agent http header ?

[Cantor, Scott]

The SameSite condition hook is not based on ProfileRequestContext, you can't use the beans that assume that input type. I believe it's a direct predicate over HttpServletRequest, but the documentation should indicate that either way.

There's no need for the wrapper bean here or anything special if that's the case. There's a class for scripted conditions over arbitrary inputs somewhere in java-support, should be mentioned on the PredefinedBeans page.

-- Scott