anchor.diff:               next if not file =~ /.*\.xml$/
           -%>
           <metadata:MetadataProvider xsi:type="FilesystemMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
  -            id="<%= File.basename(file, ".xml") %>"
  +            id="_<%= File.basename(file, ".xml") %>"
               metadataFile="<%= dir %>/<%= file %>" />
           <% end -%>
         <% end -%>
  
positive.code:     <% @relyingparties.each do |rp|
           if rp.has_key?("provider") and node["shibboleth_idp"]["override_providers"].include?(rp["provider"])
             provider = rp["provider"]
             rp["entityids"].each do |entityid|
      -%>
      <rp:RelyingParty id="<%= entityid %>"
       provider="<%= provider %>"
       defaultSigningCredentialRef="IdPCredential">
        <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"/>
        <rp:ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile"/>
        <rp:ProfileConfiguration xsi:type="saml:SAML1AttributeQueryProfile"/>
        <rp:ProfileConfiguration xsi:type="saml:SAML1ArtifactResolutionProfile"/>
      </rp:RelyingParty>
      <%     end
           end
         end -%>
      
      <!-- ========================================== -->
  
negative.code:     <!--      Relying Party Configurations          -->
      <!-- ========================================== -->
      <% if node["shibboleth_idp"].has_key?("default_provider")
           defprovider = node["shibboleth_idp"]["default_provider"]
         else
           defprovider = "https://" + node["shibboleth_idp"]["domain"] + "/idp/shibboleth"
         end
       -%>
      <rp:AnonymousRelyingParty provider="<%= defprovider %>" defaultSigningCredentialRef="IdPCredential"/>
      
      <rp:DefaultRelyingParty provider="<%= defprovider %>" defaultSigningCredentialRef="IdPCredential">
          <!-- 
              Each attribute in these profiles configuration is set to its default value,
              that is, the values that would be in effect if those attributes were not present.
  