<div dir="ltr"><div dir="ltr"><div dir="ltr">Hello List.</div><div dir="ltr"><br></div><div>We currently have Status, Reloadable Services, Resolver -- accessible via IP Address.</div><div><br></div><div>How do I configure for authenticated access to admin functions (beyond uncommenting AccessByUser or AccessByAttribute)? Or is this via building a separate UI/SP?<br></div><div><br></div><div>Is it possible to restrict access by either conditions matched: AccessByIPAddress or AccessByUser or AccessByAttribute?</div><div><br></div><div>Thanks.<br></div><div dir="ltr"><div><br></div><div><br></div><div><br></div><div><util:map id="shibboleth.AccessControlPolicies"><br>    <br>        <entry key="AccessByIPAddress"><br>            <bean id="AccessByIPAddress" parent="shibboleth.IPRangeAccessControl"<br>                p:allowedRanges="#{ {'<a href="http://127.0.0.1/32">127.0.0.1/32</a>', '::1/128'} }" /><br>        </entry><br>        <br>        <!--<br>        <entry key="AccessByUser"><br>            <bean parent="shibboleth.PredicateAccessControl"><br>                <constructor-arg><br>                    <bean parent="shibboleth.Conditions.SubjectName" c:collection="#{'jdoe'}" /><br>                </constructor-arg><br>            </bean><br>        </entry><br>        --><br>        <br>        <!--<br>        <entry key="AccessByAttribute"><br>            <bean parent="shibboleth.PredicateAccessControl"><br>                <constructor-arg><br>                    <bean class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"><br>                        <property name="attributeValueMap"><br>                            <map><br>                                <entry key="eduPersonEntitlement"><br>                                    <list><br>                                        <value><a href="https://example.org/entitlement/idpadmin">https://example.org/entitlement/idpadmin</a></value><br>                                    </list><br>                                </entry><br>                            </map><br>                        </property><br>                    </bean><br>                </constructor-arg><br>            </bean><br>        </entry><br>        --><br></div></div></div></div>