EntityAttributes Metadata Filter (IdP)

[Tom Scavo]

On Tue, Apr 14, 2015 at 9:49 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 4/14/15, 9:31 AM, "Tom Scavo" <trscavo at gmail.com> wrote:
>>
>>I would expect https://sp2.example.org to receive a single,
>>multi-valued entity attribute in this case.
>
> It doesn't, but that isn't more correct, just more optimal.

Since the resulting metadata never sees the light of day, I suppose it
doesn't matter as long as the SP does the Right Thing parsing the
metadata in the end.

Here's another example:

        <MetadataFilter xsi:type="EntityAttributes">
            <saml:Attribute Name="https://sp.example.org/tagname">
               <saml:AttributeValue>foo</saml:AttributeValue>
            </saml:Attribute>
            <Entity>https://sp1.example.org</Entity>
            <saml:Attribute Name="https://sp.example.org/tagname">
               <saml:AttributeValue>foo</saml:AttributeValue>
               <saml:AttributeValue>bar</saml:AttributeValue>
            </saml:Attribute>
            <Entity>https://sp2.example.org</Entity>
        </MetadataFilter>

Again, the result probably doesn't matter as long as the SP does the
Right Thing.

Tom