EntityAttributes Metadata Filter (IdP)

[Tom Scavo]

On Mon, Apr 13, 2015 at 10:03 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 4/13/15, 7:42 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>>
>>The entity https://sp1.example.org will get tagname1
>>The entity https://sp2.example.org will get tagname1 and tagname2
>
> That is correct. Everything is accumulated and the Entity elements cause everything in the accumulator to be cloned/copied into the entity.

An interesting question (not tested) is whether the mechanism handles
this case correctly:

        <MetadataFilter xsi:type="EntityAttributes">
            <saml:Attribute Name="https://sp.example.org/tagname">
                <saml:AttributeValue>foo</saml:AttributeValue>
            </saml:Attribute>
            <Entity>https://sp1.example.org</Entity>
            <saml:Attribute Name="https://sp.example.org/tagname">
                <saml:AttributeValue>bar</saml:AttributeValue>
            </saml:Attribute>
            <Entity>https://sp2.example.org</Entity>
        </MetadataFilter>

I would expect https://sp2.example.org to receive a single,
multi-valued entity attribute in this case.

Tom