SP Include MetadataFilter with MDQ

[Nate Klingenstein]

> Apart from the noise of the error and the logging, as far as I know it works. What you posted doesn't really match what I'd expect since it claims to be filtering out the thing you're claiming is included. The SP code appears to me to do the right thing so perhaps it's just a bug.

Didn't match what I'd expect either, but you should be able to replicate it easily.  If you're unable to, I'll take a closer look, but it worked as intended with the Include MetadataFilter removed.  We double-checked that the entityID was correct(it's also being used for direct-to-IdP discovery, and was byte by byte identical in the Include and the SSO element).

If you'd like, I'll file a bug.