The Shibboleth IdP V4 software will leave support on September 1, 2024.
MetadataFilterConfiguration
Metadata can be filtered, after loading it but before its use. Filters are specified as a series of <MetadataFilter> elements, which are processed in the order in which they occur as children of the containing <MetadataProvider> element.
Like metadata providers, metadata filters are defined by their xsi:type attribute. All other attributes and child elements are specific to each filter. The filter types provided are below.
xsi:type | Description |
|---|---|
Important for secure processing of metadata containing keys, this filter forces the metadata to carry an expiration date and limits the size of the corresponding validity interval | |
Performs XML schema validation on the metadata | |
A common filter that checks the signature on signed metadata | |
EntityRole 4.1 | A memory-saving filter that deletes unneeded role information from the metadata |
A policy aid, this filter adds information, allowing "tags" to be attached to metadata for use in other parts of the system | |
Another additive filter, adds extension elements that signal use of alternative cryptographic algorithms | |
An extensible include/exclude filter that removes matching (or keeps only matching) entities based on a set of built-in rules, or with an arbitrary condition | |
A policy aid, this filter adds information, allowing | |
A syntax aid, this filter attaches separately defined filters to metadata providers from "outside" the declaration of the providers. |