These two predicates are constructed by combining two or more predicates.
The predicate named shibboleth.Conditions.AND
returns true if all the provided predicates return true.
The predicate named shibboleth.Conditions.OR
returns true is and one of the provided predicates returns true.
These are abstract beans and so your version has to be appropriately constructed. They are usually constructed with a single parameter, being the list of predicated to be consulted, but as a short a two parameter version allows you to provide exactly two parameters,
Examples
The following example returns true if the Relying Party EntityID is one of the three values (note that this is a contrived example since the shibboleth.Conditions.RelyingPartyId
bean can take a list of candidate entity IDs
<bean id="MyCondition" parent="shibboleth.Conditions.OR"> <constructor-arg> <list> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://sp.example.com/shibboleth" /> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://my.example.com/shibboleth" /> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://another.example.com/shibboleth" /> </list> </constructor-arg> </bean>
Other examples can be found here