<div dir="ltr"><div>This was puzzling me over the weekend on if possible, and how -  stumped at the moment.</div><div><br></div><div>We have a service that allows all employees -- and wish to restrict set of users (say givenName = 'Alice') -- is this possible, any tips on how to add this condition?<br></div><div><br></div><div><bean id="ContextCheckPredicate" parent="shibboleth.Conditions.AND"><br>        <constructor-arg><br>             <list><br>                 <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="<a href="https://foo">https://foo</a>" /><br>                 <bean class="net.shibboleth.idp.profile.logic.RegexAttributePredicate"<br>                         p:useUnfilteredAttributes="true"<br>                         p:attributeId="groupMembership"<br>                         p:pattern="^(.*?)ou=employee,dc=example,dc=edu" /><br>             </list><br>             </constructor-arg> <br>    </bean></div><div><br></div><div>Thanks.<br></div></div>