The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Current »

These two predicates are constructed by combining two or more predicates.

The predicate named shibboleth.Conditions.AND returns true if all the provided predicates return true.

The predicate named shibboleth.Conditions.OR returns true is and one of the provided predicates returns true.

These are abstract beans and so your version has to be appropriately constructed.  They are usually constructed with a single parameter, being the list of predicated to be consulted, but as a short a two parameter version allows you to provide exactly two parameters,

Examples

The following example returns true if the  Relying Party EntityID is one of the three values (note that this is a contrived example since the shibboleth.Conditions.RelyingPartyId bean can take a list of candidate entity IDs

Match if the relying party is one of three elemets
<bean id="MyCondition" parent="shibboleth.Conditions.OR">
	<constructor-arg>
		<list>
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://sp.example.com/shibboleth" />
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://my.example.com/shibboleth" />
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://another.example.com/shibboleth" />
		</list>
	</constructor-arg>
</bean>

Other examples can be found here

  • No labels