...
<am:Attribute>
(one or more)- An extraction rule.
name
(string)- SAML Attribute/@Name or NameID/@Format to extract from.
nameFormat
(string)- Optional SAML @AttributeNamespace/@NameFormat of extraction source (defaults to Shibboleth "standard" URI format constants specific to each SAML version).
id
(string)- Primary internal ID of the extracted attribute.
aliases
(deprecated) (space-delimited list of strings)- Additional internal IDs for the extracted attribute.
<AttributeDecoder>
- Optionally specifies the attribute decoder to use. A simple/string decoder is used if not specified.
- An extraction rule.
...
Each <am:Attribute>
element installs a rule for extracting a named SAML attribute or name identifier into an internal attribute. The source of the attribute is identified with the name
(and possibly nameFormat
) XML attributes and internally tagged with the id
(and possibly aliases
) XML attributes. The aliases
feature is deprecated and may be removed from a future release.
The name
property corresponds to the Name
XML attribute of a SAML <Attribute>
element or the Format
XML attribute of a SAML <NameID>
/<NameIdentifier>
element.
...
Multiple <Attribute>
elements can share the same id
and alias
aliases
values; the implication is that a given internal ID may map to multiple externally-named sources.
...