Extended metadata in PingAM is a proprietary extension to the standard SAML 2.0 metadata format. Its purpose is to store and communicate additional configuration information specific to PingAM that is not covered by the SAML standard. This can include settings for attribute mapping, transient user creation, account linking, and other specific processing rules that are necessary for federation partnerships to function correctly within a PingAM environment (formerly a "Circle of Trust"). This allows for richer integration and configuration than standard metadata alone permits.

A. It specifies the certificates and keys for the SAML2 entity: Certificates and keys are part of the standard SAML 2.0 metadata specification within the KeyDescriptor element.

B. It specifies the policy to invoke during SAML2 federation: While this is an example of information that can be in extended metadata, it is not the overall purpose. Option D is a more accurate, general definition.

C. It is a standard way to communicate supported SAML2 features: Extended metadata is, by definition, non-standard and specific to PingAM. Standard features are communicated through standard metadata elements and protocol messages.

Ping Identity Documentation, PingAM > Federation > SAML v2.0 Guide for Administrators > The Extended Metadata Template. The guide states: "AM uses an extended metadata file to store information that is not included in the standard SAML v2.0 metadata."

Ping Identity Documentation, PingAM > Administration > Realms > Realm > Applications > Federation > Entity Providers. The configuration options for SAML2 entity providers detail numerous settings (e.g., Attribute Mapper, NameID format) that are stored in this extended metadata.