EntityRoleMetadataFilter
- Rod Widdowson
- Thomas Lenggenhager
- Scott Cantor
The EntityRoleWhiteList MetadataFilter, identified by type="EntityRoleWhiteList", removes unneeded/irrelevant role information from metadata to save memory.
As of V3.2, this type name is deprecated in favor of EntityRole and the original name will be removed in a future release.
Reference
Attributes
The following attributes are available
Name | Type | Default | Description |
|---|---|---|---|
removeRolelessEntityDescriptors | boolean | true | If true, then any subordinate EntityDescriptor objects are removed if they don't contain any roles after filtering. |
removeEmptyEntitiesDescriptors | boolean | true | If true, then any subordinate EntitiesDescriptor objects are removed if they don't contain any child entities or groups after filtering |
Child Elements
Element | Cardinalty | Description |
|---|---|---|
<RetainedRole> | one or more | Contains the qualified element or type name of a role to retain. |
Example
<MetadataFilter type="EntityRole">
<RetainedRole xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">md:IDPSSODescriptor</RetainedRole>
</MetadataFilter>