<div dir="ltr">In saml-nameid.xml, for single SP, the activation Condition works with the tag c:candidate<div><br></div><div>However given we got multple SPs with same nameID requirements, I coded an activation condition with c:candidates in In saml-nameid.xml and listed the SPs, this does not work</div><div><br></div><div>Do I have to define anything else.<br><div><br></div><div><br></div><div><div><bean parent="shibboleth.SAML2AttributeSourcedGenerator"</div><div>    p:format="urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified"</div><div>    p:attributeSourceIds="#{ {'uid'} }"></div><div>    <property name="activationCondition"></div><div>        <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidates="#{{'<a href="https://sample.SP.one.com">https://sample.SP.one.com</a>','<a href="https://sample.SP.two.com">https://sample.SP.two.com</a>'}}" /></div><div>    </property></div><div></bean></div></div><div><br></div></div><div><br></div><div>also in relyingparty.xml as follows</div><div><br></div><div><div> <bean parent="RelyingPartyByName" c:relyingPartyIds="#{{'<a href="https://sample.SP.one.com">https://sample.SP.one.com</a>','<a href="https://sample.SP.two.com">https://sample.SP.two.com</a>'}}"></div><div>            <property name="profileConfigurations"></div><div>                <list></div><div>         <bean parent="SAML2.SSO" p:encryptAssertions="false" p:signAssertions="true" p:signResponses="false"  p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified"/></div><div>                </list></div><div>            </property></div><div>        </bean></div></div><div><br></div></div>