wafconfg.xml

[Rod Widdowson]

> I don't know exactly what you mean by whitelisting SPs, the DS doesn't
> generally do anything but use metadata for SPs to enforce response
> locations, it doesn't maintain a list of them for any other reason that I
> know of.

For the record:

Absent "showUnusableIdPs" (or some such name) it will also trim the list of IdPs displayed if the IdP and SP are not in the same
metadata source.  The idea was that if the IdP is consuming the same metadata as the DS then it makes no sense to go to such an IdP
if the IdP won't know the SP.  This is less relevant in "DS" mode than in "WAYF" mode and in many deployments is a downright wrong
assumption (hence the "showUnusableIdPs" parameter)