Technique to blacklist/suppress entities from an aggregate using metadatafilters?

[Cantor, Scott]

> However, I can't find any syntax to support it and was looking here:
> https://wiki.shibboleth.net/confluence/display/IDP30/MetadataFilterPlugin

Child page, I'll clarify that it can allow/deny on the parent page, I'm sure that isn't clear.

https://wiki.shibboleth.net/confluence/display/IDP30/PredicateMetadataFilter

> If there is a way to do this, I'm interested to hear how others have done it
> without dismantling and manipulating the aggregate at the IdP.
> Given IdP-79 appears to be done, I'm hoping that this is just missing
> documentation :)

Just missing examples. The Predicate filter can do arbitrary conditions, but it has built-in syntax wired up to do basic matching by Entity/Group/Tag.

If you can't deduce an example, let me know and I'll have to work on one.

-- Scott