<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 11, 2015 at 10:21 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div id=":1aq" class="" style="overflow:hidden">You can write any condition you want either in Java or with a Script (a<br>
ScriptedPredicate exists). Your specific use case would I guess be to<br>
check an attribute's value in an AND with a set of OR'd together SP names.</div></blockquote></div><div class="gmail_extra"><br></div><div class="gmail_extra">This seems to work.  Could I pull the list of SPs from a properties file?</div><div class="gmail_extra"><br></div><div class="gmail_extra"><div class="gmail_extra"><bean id="shibboleth.guest-check.Condition" parent="shibboleth.Conditions.OR"></div><div class="gmail_extra">    <constructor-arg></div><div class="gmail_extra">        <list></div><div class="gmail_extra">            <bean parent="shibboleth.Conditions.NOT"></div><div class="gmail_extra">                <constructor-arg></div><div class="gmail_extra">                    <list></div><div class="gmail_extra">                        <bean class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"></div><div class="gmail_extra">                            <property name="attributeValueMap"></div><div class="gmail_extra">                                <map></div><div class="gmail_extra">                                    <entry key="isGuest"></div><div class="gmail_extra">                                        <list></div><div class="gmail_extra">                                            <value>true</value></div><div class="gmail_extra">                                        </list></div><div class="gmail_extra">                                    </entry></div><div class="gmail_extra">                                </map></div><div class="gmail_extra">                            </property></div><div class="gmail_extra">                        </bean></div><div class="gmail_extra">                    </list></div><div class="gmail_extra">                </constructor-arg></div><div class="gmail_extra">            </bean></div><div class="gmail_extra"><br></div><div class="gmail_extra">            <bean parent="shibboleth.Conditions.AND"></div><div class="gmail_extra">                <constructor-arg></div><div class="gmail_extra">                    <list></div><div class="gmail_extra">                        <bean class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"></div><div class="gmail_extra">                            <property name="attributeValueMap"></div><div class="gmail_extra">                                <map></div><div class="gmail_extra">                                    <entry key="isGuest"></div><div class="gmail_extra">                                        <list></div><div class="gmail_extra">                                            <value>true</value></div><div class="gmail_extra">                                        </list></div><div class="gmail_extra">                                    </entry></div><div class="gmail_extra">                                </map></div><div class="gmail_extra">                            </property></div><div class="gmail_extra">                        </bean></div><div class="gmail_extra"><br></div><div class="gmail_extra">                        <bean parent="shibboleth.Conditions.RelyingPartyId"></div><div class="gmail_extra">                            <constructor-arg></div><div class="gmail_extra">                                <list></div><div class="gmail_extra">                                    <value><a href="https://sp1.example.edu/shibboleth">https://sp1.example.edu/shibboleth</a></value></div><div class="gmail_extra">                                    <value><a href="https://sp2.example.edu/shibboleth">https://sp2.example.edu/shibboleth</a></value></div><div class="gmail_extra">                                    <value><a href="https://sp3.example.edu/shibboleth">https://sp3.example.edu/shibboleth</a></value></div><div class="gmail_extra">                                </list></div><div class="gmail_extra">                            </constructor-arg></div><div class="gmail_extra">                        </bean></div><div class="gmail_extra">                    </list></div><div class="gmail_extra">                </constructor-arg></div><div class="gmail_extra">            </bean></div><div class="gmail_extra">        </list></div><div class="gmail_extra">    </constructor-arg></div><div class="gmail_extra"></bean></div></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><br><br></div></div>