nameID mutiple activationCondition per SP based on different src Attribute

Cantor, Scott cantor.2 at
Mon Sep 19 16:54:32 UTC 2022

It runs them in order, and whatever conditions are attached will execute, and the first one that's active for whichever Format it's trying to use is what will be used.

If it's not working, your conditions are simply not correct and it's picking an earlier one that shouldn't be active but is, or disallowing the one you want that should be active but isn't.

Using NOTs is a pretty good way to ensure that you get the wrong answer, particularly if they're early in the chain. You should in most cases always use positively oriented conditions, not negated ones. You want special cases up front (if RP is X, Y, Z) and then the general ones afterward that just activate by default.

It's not like filter rules where they all run and combine, only one matters.
-- Scott

More information about the users mailing list