{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Namespace:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}},{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}}]},{"text":"urn:mace:shibboleth:2.0:metadata","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"Schema:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}},{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}}]},{"text":"http://shibboleth.net/schema/idp/shibboleth-metadata.xsd","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}},{"type":"link","attrs":{"href":"http://shibboleth.net/schema/idp/shibboleth-metadata.xsd"}}]}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"minLevel":{"value":"1"},"maxLevel":{"value":"2"}},"macroMetadata":{"macroId":{"value":"af9768f6c2daea052803e393d66ae82c"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"6d394d3e-0fd6-4a29-8bfb-41a12c922dd0"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"A filter of type ","type":"text"},{"text":"ByReference","type":"text","marks":[{"type":"code"}]},{"text":" is a syntax aid that allows ","type":"text"},{"text":"MetadataFilterConfiguration","type":"text","marks":[{"type":"link","attrs":{"href":"https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507005"}}]},{"text":" to be defined outside of <","type":"text"},{"text":"MetadataProvider","type":"text","marks":[{"type":"link","attrs":{"href":"https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199506698"}}]},{"text":"> elements and reference named providers \"out of band\", separating the declaration of general metadata source details from deployer-specific filtering rules.","type":"text"}]},{"type":"paragraph","content":[{"text":"There is nothing functionally different about using this approach; it's purely a configuration style issue.","type":"text"}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"ByReference","type":"text","marks":[{"type":"code"}]},{"text":" syntax relies on a set of child elements named ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" that contain a ","type":"text"},{"text":"providerRef","type":"text","marks":[{"type":"code"}]},{"text":" XML attribute identifying the <","type":"text"},{"text":"MetadataProvider","type":"text","marks":[{"type":"link","attrs":{"href":"https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199506698"}}]},{"text":"> (or providers) to apply a set of filters to, and then the filters to apply are declared within, in the normal way.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Filter order is important!","type":"text"}]},{"type":"paragraph","content":[{"text":"This filter may or may not change the content of the metadata and so its use needs to be carefully coordinated with any inline filters. Out of band filters will run after any inline filters.","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Reference","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"XML Elements","type":"text"}]},{"type":"table","attrs":{"layout":"full-width","width":1800.0,"localId":"95970740-c53c-4303-bb2a-f6b312a45c6e"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[1139.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[172.0]},"content":[{"type":"paragraph","content":[{"text":"","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[1139.0]},"content":[{"type":"paragraph","content":[{"text":"Each out of band declaration consists of a required XML attribute named ","type":"text"},{"text":"providerRef","type":"text","marks":[{"type":"code"}]},{"text":" and a sequence of zero or more ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" elements of any of the normal types supported. The ","type":"text"},{"text":"providerRef","type":"text","marks":[{"type":"code"}]},{"text":" attribute contains a space-delimited list of IDs of providers to apply the filter(s) to.","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Example","type":"text"}]},{"type":"paragraph","content":[{"text":"The examples shows a typical usage pattern via a separate Spring resource loaded into the metadata resolver service by adding it to the resource set in ","type":"text"},{"text":"conf/services.xml","type":"text","marks":[{"type":"em"}]},{"text":" (e.g., perhaps in a file named ","type":"text"},{"text":"conf/metadata-filters.xml","type":"text","marks":[{"type":"em"}]},{"text":").","type":"text"}]},{"type":"paragraph","content":[{"text":"Obviously in isolation this looks (and is) silly given all the XML required to do this, but obviously in a real case you would define many filters in this one file, separately from the metadata providers they influence.","type":"text"}]},{"type":"expand","attrs":{"title":""},"content":[{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\n\n \n \n \n eduPersonPrincipalName\n \n https://sp.example.org/shibboleth\n \n \n\n","type":"text"}]}]},{"type":"paragraph"}],"version":1}