The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.
ANDORPredicates
These two predicates are constructed by combining two or more predicates.
The predicate named shibboleth.Conditions.ANDÂ
returns true if all the provided predicates return true.
The predicate named shibboleth.Conditions.ORÂ
returns true is and one of the provided predicates returns true.
These are abstract beans and so your version has to be appropriately constructed. They are usually constructed with a single parameter, the list of predicates to be consulted.
Examples
The following example returns true if the Relying Party EntityID is one of the three values (note that this is a contrived example since the shibboleth.Conditions.RelyingPartyId
bean can take a list of candidate entity IDs
<bean id="MyCondition" parent="shibboleth.Conditions.OR"> <constructor-arg> <list> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://sp.example.com/shibboleth" /> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://my.example.com/shibboleth" /> <bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://another.example.com/shibboleth" /> </list> </constructor-arg> </bean>
Other examples can be found here