SchemaValidationFilter

Namespace: urn:mace:shibboleth:2.0:metadata
Schema: http://shibboleth.net/schema/idp/shibboleth-metadata.xsd

Overview

The SchemaValidation filter allows the validation of the provided metadata against an XML schema. Note that while schema validation can catch a variety of errors in metadata, it is not sufficient to prevent all possible sources of error because XSD isn't expressive enough in practice to describe all the requirements of the standard. Metadata sources should be limited to trustworthy publishers whether this filter is used or not.

Reference

Name

Type

Default

Description

Name

Type

Default

Description

schemaBuilderRef

Bean ID

shibboleth.SchemaBuilder

Bean ID of type SAMLSchemaBuilder. The default validates against SAML 2.0, SAML 1.1 and many common (to Shibboleth deployments) metadata extension schemas such as MDATTR, MDUI and MDRPI.

Name

Type

Default

Description

Name

Type

Default

Description

idp.schemaValidation.strict

Boolean

false

When true, enables a more strict version of the SAML schemas to be applied that disallow empty string- or URI-valued elements, which is a requirement of the standard but is not enforced by the original schemas. This is not foolproof, but it does catch a number of commonly broken cases.

These beans were added to support easier supplementing of the schemas to load for validation of metadata. They are lists of Spring resources, and should be classpath-based resources for the parser to resolve them properly.

Name

Type

Description

Name

Type

Description

shibboleth.ExtensionSchemas

List<Resource>

Reserved name of a bean to supply extension schemas to load

shibboleth.DefaultExtensionSchemas

List<Resource>

Built-in list of extension schemas that can be extended

To add a custom schema, you would define shibboleth.ExtensionSchemas in global.xml or a similar spot and merge that with the parent bean:

1 2 3 4 5 6 7 <bean id="shibboleth.ExtensionSchemas" parent="shibboleth.DefaultExtensionSchemas"> <property name="sourceList"> <list merge="true"> <value>classpath:/schema/custom-schema.xsd</value> </list> </property> </bean>

 

Examples

SAML Schema Validation
1 <MetadataFilter xsi:type="SchemaValidation" />