<div dir="ltr"><div dir="ltr">For expiring-password-intercept-config.xml .... the out of the box setting is as below......<br><div><br></div><div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(57,51,255)"><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">id</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"shibboleth.expiring-password.Condition"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">class</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"net.shibboleth.idp.profile.logic.DateAttributePredicate"</p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(147,33,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span>c:attribute<span class="gmail-s3" style="color:rgb(0,0,0)">=</span><span class="gmail-s5" style="color:rgb(57,51,255)">"passwordExpiration"</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span>p:resultIfMissing<span class="gmail-s3" style="color:rgb(0,0,0)">=</span><span class="gmail-s5" style="color:rgb(57,51,255)">"true"</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(78,145,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span>constructor-arg<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">name</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span><span class="gmail-s5" style="color:rgb(57,51,255)">"formatter"</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(57,51,255)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">class</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"org.joda.time.format.DateTimeFormat"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">factory-method</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"forPattern"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">c:_0</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"yyyyMMddHHmmss'T'"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s1" style="color:rgb(0,145,147)">/></span></p>
<p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(78,145,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span>constructor-arg<span class="gmail-s1" style="color:rgb(0,145,147)">></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(57,51,255)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">property</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">name</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"systemTimeOffset"<span class="gmail-s1" style="color:rgb(0,145,147)">></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(57,51,255)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">class</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"org.joda.time.Duration"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">factory-method</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"standardDays"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">c:_0</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"-14"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s1" style="color:rgb(0,145,147)">/></span></p>
<p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span><span class="gmail-s2" style="color:rgb(78,145,146)">property</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p>
<p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"><br></span></p><p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><br></p><p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small">Can I do something like below (which I have for an authorization workflow):</span><br></span></p><p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small"><br></span></span></p><p class="gmail-p1" style="margin:0px;font:13px Monaco;color:rgb(57,51,255)"><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">id</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"ContextCheckPredicate"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">parent</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"shibboleth.Conditions.AND"<span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p2" style="margin:0px;font:13px Monaco;color:rgb(78,145,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span>constructor-arg<span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p3" style="margin:0px;font:13px Monaco"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">list</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p1" style="margin:0px;font:13px Monaco;color:rgb(57,51,255)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">class</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"net.shibboleth.idp.profile.logic.RegexAttributePredicate"</p><p class="gmail-p3" style="margin:0px;font:13px Monaco"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">p:useUnfilteredAttributes</span>=<span class="gmail-s5" style="color:rgb(57,51,255)">"true"</span></p><p class="gmail-p3" style="margin:0px;font:13px Monaco"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">p:attributeId</span>=<span class="gmail-s5" style="color:rgb(57,51,255)">"groupMembership"</span></p><p class="gmail-p1" style="margin:0px;font:13px Monaco;color:rgb(57,51,255)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="color:rgb(147,33,146)">p:pattern</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"^(.*?)ou=foo,dc=example,dc=edu"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s1" style="color:rgb(0,145,147)">/></span></p><p class="gmail-p3" style="margin:0px;font:13px Monaco"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span><span class="gmail-s2" style="color:rgb(78,145,146)">list</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p2" style="margin:0px;font:13px Monaco;color:rgb(78,145,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span><span class="gmail-Apple-tab-span" style="white-space:pre"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span>constructor-arg<span class="gmail-s1" style="color:rgb(0,145,147)">></span><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span></p><p class="gmail-p4" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)">
</span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"><br></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"><br></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small">For example .... Will something like below work?</span><br></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"><br></span></p><p class="gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(57,51,255)"><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">id</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"shibboleth.expiring-password.Condition"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">class</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"net.shibboleth.idp.profile.logic.DateAttributePredicate"</p><p class="gmail-p2" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(147,33,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span>c:attribute<span class="gmail-s3" style="color:rgb(0,0,0)">=</span><span class="gmail-s5" style="color:rgb(57,51,255)">"passwordExpiration"</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span>p:resultIfMissing<span class="gmail-s3" style="color:rgb(0,0,0)">=</span><span class="gmail-s5" style="color:rgb(57,51,255)">"true"</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p2" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(147,33,146)"><span class="gmail-s1" style="color:rgb(0,145,147)"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4">id</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span><span style="color:rgb(57,51,255)">"ContextCheckPredicate"</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4">parent</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span><span style="color:rgb(57,51,255)">"shibboleth.Conditions.AND"</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p2" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(78,145,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span>constructor-arg<span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p3" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">list</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(57,51,255)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"><</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">class</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"net.shibboleth.idp.profile.logic.RegexAttributePredicate"</p><p class="gmail-p3" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">p:useUnfilteredAttributes</span>=<span class="gmail-s5" style="color:rgb(57,51,255)">"true"</span></p><p class="gmail-p3" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s4" style="color:rgb(147,33,146)">p:attributeId</span>=<span class="gmail-s5" style="color:rgb(57,51,255)">"groupMembership"</span></p><p class="gmail-p1" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(57,51,255)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s4" style="color:rgb(147,33,146)">p:pattern</span><span class="gmail-s3" style="color:rgb(0,0,0)">=</span>"^(.*?)ou=foo,dc=example,dc=edu"<span class="gmail-s3" style="color:rgb(0,0,0)"> </span><span class="gmail-s1" style="color:rgb(0,145,147)">/></span></p><p class="gmail-p3" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span><span class="gmail-s2" style="color:rgb(78,145,146)">list</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p2" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(78,145,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span><span class="gmail-Apple-tab-span" style="white-space:pre"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span>constructor-arg<span class="gmail-s1" style="color:rgb(0,145,147)">></span><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span></p><p class="gmail-p2" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px;color:rgb(78,145,146)"><span class="gmail-s3" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span><span class="gmail-s2">bean</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p><p class="gmail-p4" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px"><span class="gmail-s1" style="color:rgb(0,145,147)"></span></p><p class="gmail-p3" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco"><span class="gmail-s1" style="color:rgb(0,145,147)"></span></p><p class="gmail-p3" style="font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;margin:0px"><span class="gmail-Apple-converted-space"> </span><span class="gmail-s1" style="color:rgb(0,145,147)"></</span><span class="gmail-s2" style="color:rgb(78,145,146)">bean</span><span class="gmail-s1" style="color:rgb(0,145,147)">></span></p></div></div></div>