From 02f70b86fbdaf87daf8bd4505dd87d65c3e8aa43 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Tue, 16 Dec 2014 12:07:20 +0000
Subject: [PATCH] Remove md:RoleDescriptor elements from imported metadata.

These elements require additional schema definitions to be useful, and if those are not present at consuming entities schema validation errors will occur. We therefore strip them out entirely. This will mainly affect ADFS entities, but won't immediately allow those to be accepted as they also tend to have invalid AssertionConsumerService bindings.
---
 mdx/clean-import.xsl | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/mdx/clean-import.xsl b/mdx/clean-import.xsl
index f1a0095c..17a112a5 100644
--- a/mdx/clean-import.xsl
+++ b/mdx/clean-import.xsl
@@ -22,6 +22,9 @@
 	<xsl:template match="md:EntityDescriptor/@cacheDuration"/>
 	<xsl:template match="md:EntityDescriptor/@validUntil"/>
 	
+	<!-- Remove md:RoleDescriptor elements, which require additional schemas to be available. -->
+	<xsl:template match="md:RoleDescriptor"/>
+	
 	<!-- strip xml:base entirely -->
 	<xsl:template match="@xml:base"/>