IdP - EntityAttributes - Predicate - Regex filter for federation SPs

[Tom Scavo]

Hi Martin,

On Tue, Apr 24, 2018 at 9:50 AM, Martin Lunze
<martin.lunze at tu-dresden.de> wrote:
>
> <MetadataProvider id="DFN-AAI-EduGain"
>     xsi:type="FileBackedHTTPMetadataProvider"
>     backingFile="%{idp.home}/metadata/DFN-AAI-edugain-metadata.xml"
>
> metadataURL="https://www.aai.dfn.de/fileadmin/metadata/dfn-aai-edugain+sp-metadata.xml"
>     maxRefreshDelay="PT2H">
>
>     <MetadataFilter xsi:type="SignatureValidation" requireSignedRoot="true"
>         certificateFile="/etc/apache2/ssl.crt/dfn-aai.g2.pem"/>
>     <MetadataFilter xsi:type="EntityRoleWhiteList">
>         <RetainedRole>md:SPSSODescriptor</RetainedRole>
>     </MetadataFilter>
>     <MetadataFilter xsi:type="EntityAttributes">
>         <saml:Attribute
>             Name="https://tu-dresden.de/entity-type"
>             NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
>
> <saml:AttributeValue>https://tu-dresden.de/entity-type/external/edugain</saml:AttributeValue>
>         </saml:Attribute>
>         <ConditionRef>always-true</ConditionRef>
>     </MetadataFilter>
> </MetadataProvider>

I don't have an answer to your question but I wanted to ask: Did you
intentionally omit a RequiredValidUntil filter or was that
intentional?

Cheers,

Tom