Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Namespace: urn:mace:shibboleth:2.0:metadata
Schema: http://shibboleth.net/schema/idp/shibboleth-metadata.xsd

A filter of type Algorithm adds extension elements defined by the SAML V2.0 Metadata Profile for Algorithm Support, which the IdP supports as a means of determining the best cryptographic algorithms to use when communicating with a particular relying party. It is the only practical mechanism whereby newer algorithms can be safely deployed without breaking interoperability.

...

Tip
titlePosition the Algorithm filter for efficiency
Deliberately position an Algorithm filter in the overall sequence of filters for optimal efficiency. In particular, a filter of type Algorithm should appear after the EntityRoleWhiteListFilter EntityRoleFilter since the latter effectively removes entities from the input.

Schemas

The <MetadataFilter> element and the type Algorithm are defined by the urn:mace:shibboleth:2.0:metadata namespace, the schema for which is located at http://shibboleth.net/schema/idp/shibboleth-metadata.xsd

Other Relevant Schemas

The schema for the <alg:DigestMethod> and <alg:SigningMethod> extension elements is part of the OASIS SAML V2.0 Metadata Profile for Algorithm Support specification.

...

Note

It is unsafe and undefined to use Spring properties (%{foo}) in any of the content for this filter description.

Attributes

None.

Child Elements

Any of the following can be supplied in any order:

...