Implementation of IP-Address based MFA override using IpAddressMatcher

Cantor, Scott cantor.2 at osu.edu
Fri Mar 24 17:56:33 UTC 2023


> Can some show, how to convert the shown solution to this?

The Spring documentation should be your first stop, because until it's not complicated for you, you're not going to get much done on your own.

In general terms, what you're asking for requires that you define a bean with the predicate, wire it in as a customObjectRef into the script, and then run it.

    <bean id="MyCondition" class="org.opensaml.profile.logic.IPRangePredicate">
        <property name="ranges">
            <list>
                <bean class="net.shibboleth.utilities.java.support.net.IPRange"  factory-method="parseCIDRBlock" c:cidrBlock="192.168.1.0/24"/>
                <bean class="net.shibboleth.utilities.java.support.net.IPRange"  factory-method="parseCIDRBlock" c:cidrBlock="192.168.2.0/28"/>
            </list>
         </property>
    </bean>

-- Scott




More information about the users mailing list