Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Metadata can be filtered, after loading it and but before its use. Filters are specified as a series of <MetadataFilter> elements, which are processed in the order in which they occur as children of the containing <MetadataProvider>Filters are all element.

Like metadata providers, metadata filters are defined by their xsi:type attribute.  All other attributes and child elements are specific to each filter. The filter types provided are:

  • ChainingFilterChaining Filter (DEPRECATED)
    • Normally automatically applied whenever multiple filters appear, this wraps multiple filters into a chain, running each one in turn
  • RequiredValidUntil Filter
    • Important for secure processing of metadata containing keys, it enforces requirements for this filter forces the metadata to carry an expiration date and limits the size of that window
    SchemaValidationFilter
    • the corresponding validity interval
  • SchemaValidation Filter
    • Performs XML schema validation of a on the metadata source
  • SignatureValidation Filter
    • The most A common filter , that checks the signature on a signed metadata source
  • EntityRoleWhiteList Filter
    • A memory-saving filter , it that deletes unneeded role information from the metadata
  • EntityAttributes Filter
    • A policy aid, this filter actually adds information, allowing "tags" to be attached to metadata for use in other parts of the system
  • Predicate Metadata Filter
    • An extensible allow/deny filter , it can remove that removes matching (or keep keeps only matching) entities based on a set of built-in rules, or with an arbitrary condition
  • NameIDFormat Filter 3.3
    • A policy aid, this filter adds information, allowing <NameIDFormat> elements to be attached to metadata for use in driving identifier format selection.

...