Correction: <bean id="MyCondition" class="org.opensaml.profile.logic.IPRangePredicate" p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"> ... Forgot to inject the request to obtain the address. -- Scott