OIDC metadata policy template question

[Wessel, Keith]

Hi, all,

I've been digging into the new metadata policy feature in IdP 4.2, and it all makes sense except for one thing. What's the default behavior for elements in the registration that aren't mentioned in the policy template? If not included in the template, is it default allowed or rejected?

I assume it's allowed since the template doesn't include definitions for basic things like client_id. But I wanted to be sure.

Thanks,
Keith