On 06/25/2014 05:40 PM, Cantor, Scott wrote: > No. In most cases that filter is only useful for reducing memory footprint, so I'm not sure it does what you think it does. Right. The IdP 'role' filter was a poor analogy. Thanks. Tom.