The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.

ANDORPredicates

These two predicates are constructed by combining two or more predicates.

The predicate named shibboleth.Conditions.AND returns true if all the provided predicates return true.

The predicate named shibboleth.Conditions.OR returns true is and one of the provided predicates returns true.

These are abstract beans and so your version has to be appropriately constructed. They are usually constructed with a single parameter, the list of predicates to be consulted.

Examples

The following example returns true if the  Relying Party EntityID is one of the three values (note that this is a contrived example since the shibboleth.Conditions.RelyingPartyId bean can take a list of candidate entity IDs

Match if the relying party is one of three elemets
<bean id="MyCondition" parent="shibboleth.Conditions.OR">
	<constructor-arg>
		<list>
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://sp.example.com/shibboleth" />
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://my.example.com/shibboleth" />
			<bean parent="shibboleth.Conditions.RelyingPartyId" c:candidate="https://another.example.com/shibboleth" />
		</list>
	</constructor-arg>
</bean>

Other examples can be found here