I have a question about claims based authentication. I have setup a webapp with claims and the claims are populated. Both authentication as well as authorization are working. But suppose my user has two claims: country and manager. And I now want to authorize all German managers to a certain resource. I would have to check for a combination of both; so a user having the 'Germany' country claims and the 'Yes' flag for manager.
Is this possible, or do I have to write some logic to combine the two into one and use that one for authentication, for instance saying 'German Manager'?