Namespace: urn:mace:shibboleth:2.0:metadata
Schema: http://shibboleth.net/schema/idp/shibboleth-metadata.xsd
A filter of type Algorithm
adds extension elements defined by the SAML V2.0 Metadata Profile for Algorithm Support, which the IdP supports as a means of determining the best cryptographic algorithms to use when communicating with a particular relying party. It is the only practical mechanism whereby newer algorithms can be safely deployed without breaking interoperability.
...
Tip | ||
---|---|---|
| ||
Deliberately position an Algorithm filter in the overall sequence of filters for optimal efficiency. In particular, a filter of type Algorithm should appear after the EntityRoleWhiteListFilter EntityRoleFilter since the latter effectively removes entities from the input. |
Schemas
The <MetadataFilter>
element and the type Algorithm
are defined by the urn:mace:shibboleth:2.0:metadata
namespace, the schema for which is located at http://shibboleth.net/schema/idp/shibboleth-metadata.xsd
Other Relevant Schemas
The schema for the <alg:DigestMethod>
and <alg:SigningMethod>
extension elements is part of the OASIS SAML V2.0 Metadata Profile for Algorithm Support specification.
...
Note |
---|
It is unsafe and undefined to use Spring properties (%{foo}) in any of the content for this filter description. |
Attributes
None.
Child Elements
Any of the following can be supplied in any order:
...