EntityRoleWhiteList metadata filter

[Tom Scavo]

On Mon, Jun 25, 2018 at 7:46 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 6/25/18, 6:10 PM, "dev on behalf of Tom Scavo" <dev-bounces at shibboleth.net on behalf of trscavo at gmail.com> wrote:
>
>> What about an entity with an AffiliationDescriptor child element? Icwould expect this filter to not touch that at all. Is
>> that what happens?
>
> If you tell it to keep only something with some kind of role, it's going to toss that if the entity in question doesn't have that role.

But there are two completely different types of entity descriptor (as
you know). Either the entity contains one or more role descriptors or
the entity contains a single affiliation descriptor. So the question
is: Should this filter completely ignore the latter?

> That code predates anything I did and isn't compatible with it.

I understand. Before I attempt to document this in jira, I need to
probe further.

To summarize: This filter excludes ALL entities that contain an
affiliation descriptor (which is the opposite of what it should do).

What about the removeRolelessEntityDescriptors attribute? What is the
filter's working definition of "roleless entity descriptor?" In any
case, why does this filter care about this?

Thanks,

Tom