{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Namespace:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}},{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}}]},{"text":"urn:mace:shibboleth:2.0:metadata","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"Schema:","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}},{"type":"strong"}]},{"text":" ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}}]},{"text":"http://shibboleth.net/schema/idp/shibboleth-metadata.xsd","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}},{"type":"link","attrs":{"href":"http://shibboleth.net/schema/idp/shibboleth-metadata.xsd"}}]}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"4edb3dad-19e5-4076-9630-adec25701be8"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"9f5162d8-d083-45b7-8c40-cb3fd2367e80"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"A filter of type ","type":"text"},{"text":"NameIDFormat","type":"text","marks":[{"type":"code"}]},{"text":" adds SAML ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" elements to metadata in order to drive software behavior (primarily Name Identifier ","type":"text"},{"text":"format selection","type":"text","marks":[{"type":"link","attrs":{"href":"/wiki/spaces/IDP5/pages/3199507810"}}]},{"text":").","type":"text"}]},{"type":"paragraph","content":[{"text":"Sequences of string-valued ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" elements are supplied as filter content. When a child element such as ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" or ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" or ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" evaluates to true, the formats are applied to all the recognized format-supporting roles of the corresponding entities. The filter does not have the capability to limit the roles to which formats will be attached.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"Filter order is important!","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"This filter changes the content of the metadata and so a filter of type ","type":"text"},{"text":"NameIDFormat","type":"text","marks":[{"type":"code"}]},{"text":" should appear after any ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507384"}},{"text":" in the overall ","type":"text"},{"text":"MetadataProvider","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]}]},{"type":"panel","attrs":{"panelType":"success"},"content":[{"type":"paragraph","content":[{"text":"Position the NameIDFormat filter for efficiency","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Deliberately position a ","type":"text"},{"text":"NameIDFormat","type":"text","marks":[{"type":"code"}]},{"text":" filter in the overall sequence of filters for optimal efficiency. In particular, a filter of type ","type":"text"},{"text":"NameIDFormat","type":"text","marks":[{"type":"code"}]},{"text":" should appear after the ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199507218"}},{"text":" since the latter effectively removes entities from the input.","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Reference","type":"text"}]},{"type":"expand","attrs":{"title":"XML Attributes"},"content":[{"type":"table","attrs":{"layout":"full-width","localId":"adc994a0-e3f6-498e-9d13-9904d041740a"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[88.0]},"content":[{"type":"paragraph","content":[{"text":"Type","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[102.0]},"content":[{"type":"paragraph","content":[{"text":"Default","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[798.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[210.0]},"content":[{"type":"paragraph","content":[{"text":"removeExistingFormats","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[88.0]},"content":[{"type":"paragraph","content":[{"text":"Boolean","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[102.0]},"content":[{"type":"paragraph","content":[{"text":"false","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[798.0]},"content":[{"type":"paragraph","content":[{"text":"Whether to remove any existing formats from a role if any are added by the filter (unmodified roles will be untouched regardless of this setting)","type":"text"}]}]}]}]}]},{"type":"expand","attrs":{"title":"XML Elements"},"content":[{"type":"table","attrs":{"layout":"full-width","localId":"0594c1fc-a84a-435f-b0d5-c40d6d1c93fb"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"Name","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[962.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[962.0]},"content":[{"type":"paragraph","content":[{"text":"Content is name identifier format which is added to all the applicable roles of the entities which match any of the following or elements.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[962.0]},"content":[{"type":"paragraph","content":[{"text":"The textual content is an EntityID. All preceding formats are added to applicable roles of the matching entity.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"text":"5.1","type":"text","marks":[{"type":"subsup","attrs":{"type":"sup"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[962.0]},"content":[{"type":"paragraph","content":[{"text":"The textual content is a regular expression to match against the entityID. All preceding formats are added to matching entities.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":" ","type":"text"},{"type":"hardBreak"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[962.0]},"content":[{"type":"paragraph","content":[{"text":"The textual content is the Bean ID of a ","type":"text"},{"text":"Predicate","type":"text","marks":[{"type":"link","attrs":{"href":"http://shibboleth.net/cgi-bin/java-jdk.cgi/java.util.function.Predicate"}}]},{"text":"<","type":"text"},{"text":"EntityDescriptor","type":"text","marks":[{"type":"link","attrs":{"href":"http://shibboleth.net/cgi-bin/java-opensaml.cgi/org.opensaml.saml.saml2.metadata.EntityDescriptor"}}]},{"text":">. All preceding formats are added to the roles of the entities for which this returns true.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[167.0]},"content":[{"type":"paragraph","content":[{"text":"<","type":"text"},{"text":"ConditionScript","type":"text","marks":[{"type":"link","attrs":{"href":"/wiki/spaces/IDP5/pages/3199507115"}}]},{"text":">","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[962.0]},"content":[{"type":"paragraph","content":[{"text":"The content of this element is an inline or local script resource that implements ","type":"text"},{"text":"Predicate","type":"text","marks":[{"type":"link","attrs":{"href":"http://shibboleth.net/cgi-bin/java-jdk.cgi/java.util.function.Predicate"}}]},{"text":"<","type":"text"},{"text":"EntityDescriptor","type":"text","marks":[{"type":"link","attrs":{"href":"http://shibboleth.net/cgi-bin/java-opensaml.cgi/org.opensaml.saml.saml2.metadata.EntityDescriptor"}}]},{"text":">. All preceding formats are added to the entities for which this returns true.","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Examples","type":"text"}]},{"type":"paragraph","content":[{"text":" The example will add the \"persistent\" format to the first entity, and both the \"persistent\" and \"email\" formats to the second.","type":"text","marks":[{"type":"textColor","attrs":{"color":"#222222"}}]}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Add NameIDFormat elements to metadata","type":"text","marks":[{"type":"strong"}]}]},{"type":"expand","attrs":{"title":"Add NameIDFormat elements to metadata"},"content":[{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\turn:oasis:names:tc:SAML:2.0:nameid-format:persistent\n\thttps://sp1.example.org\n\turn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\n\thttps://sp2.example.org\n","type":"text"}]}]},{"type":"paragraph","content":[{"text":"The following example is similar, but the specification of the entities to apply the formats to is handled with inline scripts. Obviously these scripts aren't particularly useful but they demonstrate the syntax.","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Use of scripts","type":"text","marks":[{"type":"strong"}]}]},{"type":"expand","attrs":{"title":"Use of scripts"},"content":[{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\turn:oasis:names:tc:SAML:2.0:nameid-format:persistent\n\t\n\t \n\t\n\turn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\n\t\n\t \n\t\n","type":"text"}]}]}],"version":1}