Page tree
Skip to end of metadata
Go to start of metadata

These two predicates are constructed by combining two or more predicates.

The predicate named shibboleth.Conditions.AND returns true if all the provided predicates return true.

The predicate named shibboleth.Conditions.OR returns true is and one of the provided predicates returns true.

These are abstract beans and so your version has to be appropriately constructed. They are usually constructed with a single parameter, the list of predicates to be consulted.

Examples

The following example returns true if the  Relying Party EntityID is one of the three values (note that this is a contrived example since the shibboleth.Conditions.RelyingPartyId bean can take a list of candidate entity IDs

Match if the relying party is one of three elemets
<bean id="MyCondition" parent="shibboleth.Conditions.OR">
	<constructor-arg>
		<list>
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://sp.example.com/shibboleth" />
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://my.example.com/shibboleth" />
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://another.example.com/shibboleth" />
		</list>
	</constructor-arg>
</bean>

Other examples can be found here

  • No labels