EntityRoleWhiteList metadata filter

[Tom Scavo]

On Tue, Jun 26, 2018 at 5:53 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 6/26/18, 5:17 PM, "dev on behalf of Tom Scavo" <dev-bounces at shibboleth.net on behalf of trscavo at gmail.com> wrote:
>
>> Do you agree? Are the above filters equivalent?
>
> No, because you're wrong about what the role filter does.
>
> Also your shorthand there to specify the role to test for in the script example is unlikely to be valid, that should probably just go after the SPSSODescriptors collection directly instead of trying to access it by QName via a script. A QName would be a real Java object you'd have to create, it's not just some XML expression in the script.

I see. Unfortunately the getSPSSODescriptor method takes a protocol
string argument, so that looks like a dead end, at least for my
purposes.

There is a no-argument getRoleDescriptors() method but I don't know
how to map the resulting list of RoleDescriptor objects to the
corresponding list of local names. If I knew how to do that, I could
test if the list of local names contains "SPSSODescriptor".

Thoughts?

Thanks,

Tom