From bda678277988694defc1b8aec4caf67b090a9582 Mon Sep 17 00:00:00 2001
From: Thijs Kinkhorst <thijs@kinkhorst.com>
Date: Wed, 13 Sep 2023 15:16:39 +0200
Subject: [PATCH] New informational flag on SP metadata
 coin:uses_idp_entityid_for_identification

---
 .../files/metadata_configuration/saml20_sp.schema.json.j2    | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/manage-server/files/metadata_configuration/saml20_sp.schema.json.j2 b/roles/manage-server/files/metadata_configuration/saml20_sp.schema.json.j2
index ba6748215..113b77c64 100644
--- a/roles/manage-server/files/metadata_configuration/saml20_sp.schema.json.j2
+++ b/roles/manage-server/files/metadata_configuration/saml20_sp.schema.json.j2
@@ -330,6 +330,11 @@
           "type": "boolean",
           "info": "Whether authentication requests from this SP must be signed. Enabling signed autentication requests for an SP enables this SP to specify its own Assertion Consumer Service URLs in the authentication request."
         },
+        "coin:uses_idp_entityid_for_identification": {
+          "type": "boolean",
+          "default": false,
+          "info": "This service provider uses the entityID of the user's IdP for identification or authorization purposes, so needs to be notified when a connected IdP's entityID changes (informational)"
+        },
         "coin:sp_specific_metadata": {
           "type": "boolean",
           "default": false,