<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Closing the loop on this thread:<div><br></div><div>Tom’s Whitelist filter suggestion works (not surprisingly) to filter out the entities other than that listed,</div><div>enabling the SP to consume/update my IdP metadata from signed InC metadata repository. </div><div><br></div><div><br></div><div><div><MetadataProvider type=“XML” </div><div><span class="Apple-tab-span" style="white-space:pre"> </span>uri="<a href="http://md.incommon.org/InCommon/InCommon-metadata.xml">http://md.incommon.org/InCommon/InCommon-metadata.xml</a>"<br><span class="Apple-tab-span" style="white-space:pre"> </span>backingFilePath=“partner-metadata.xml”</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>reloadInterval="7200”></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><MetadataFilter type=“RequireValidUntil" maxValidityInterval="2419200”/></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><MetadataFilter type="Signature" certificate="incommon.pem”/><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><MetadataFilter type="Whitelist"><br><span class="Apple-tab-span" style="white-space:pre"> </span><Include>my_idp_entityID_here</Include></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></MetadataFilter><br></div><div></MetadataProvider><br></div><div><br></div><div>This use appears adequately documented at </div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPMetadataFilter#NativeSPMetadataFilter-WhitelistMetadataFilter">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPMetadataFilter#NativeSPMetadataFilter-WhitelistMetadataFilter</a></div><br>David Bantz</div><div>U Alaska</div></body></html>