Technique to blacklist/suppress entities from an aggregate using metadatafilters?

[Chris Phillips]

Hi,
I'm trying to find out if I can filter entities out of a given entity from an aggregate at the IdP (latest v3 IdP of course).

What I'm trying to accomplish is to suppress an entity from one aggregate so that a different aggregate can provide it and not collide.

I checked to see if order matters for a precedence technique and appears that it doesn't:
http://shibboleth.net/pipermail/users/2014-October/017714.html


I see this issue in the tracker which leads me to believe this is possible:
MetadataFilter / adding Whitelist and Blacklist features:https://issues.shibboleth.net/jira/browse/IDP-79

However, I can't find any syntax to support it and was looking here:
https://wiki.shibboleth.net/confluence/display/IDP30/MetadataFilterPlugin


If there is a way to do this, I'm interested to hear how others have done it without dismantling and manipulating the aggregate at the IdP.
Given IdP-79 appears to be done, I'm hoping that this is just missing documentation :)



Chris.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160809/852d761d/attachment-0001.html>