dynamic property on SAML2SSOConfiguration

Marco Naimoli marco.naimoli at unipd.it
Tue Aug 1 10:33:24 UTC 2023


Hi all, the Shibboleth IDP 4 SAML2SSOConfiguration wiki page says:
"Virtually all the configuration options below can be set via two different
properties: a static property that explicitly sets the value to use and a
lookup strategy or predicate property that takes a Function
<http://shibboleth.net/cgi-bin/java-jdk.cgi/java.util.function.Function> or
Predicate
<http://shibboleth.net/cgi-bin/java-jdk.cgi/java.util.function.Predicate>
and returns the value to use. The dynamic property is generally named
"propertyNamePredicate" or "propertyNameLookupStrategy" for Boolean- and
non-Boolean-valued properties respectively."

If I understand correctly, I could set the forceAuthn property using a
function or a predicate; so I configured something like:
<bean parent="Shibboleth.SSO" p:forceAuthnPredicate="myFunction" />

But logs say:
127.0.0.1|2023-08-01 11:47:48,895 - WARN
[net.shibboleth.ext.spring.config.StringBooleanToPredicateConverter:52]|node0112712rdna23eo3kieob2q3xv13|Unrecognized
value 'myFunction' converted to false; if intentional, explicitly use
'false'
and the dynamic setting doesn't work

I've put the bean with id myFunction in relying-party.xml,
function-authn-config.xml, global.xml , but nothing changes. How can I
specify the function/predicate to use ?
Thank you
Marco
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230801/dac0c1ea/attachment.htm>


More information about the users mailing list