Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Drop confusing "(naturally)".

I think this is intended to mean that "of course" an AttributeDefinition is defined with <AttributeDefinition>, but the placement of "naturally" is off and doesn't really add anything.

...

An AttributeDefinition is defined using the (naturally) <AttributeDefinition> element, but each type of definition is distinguished by its "XML schema type", which is carried by the xsi:type XML attribute.

...

xsi:type

Function

Simple

Copies an input attribute to an output attribute. Typically this was used to 'expose' attributes sourced from a DataConnector, and is often superfluous now with the ability to export attributes from them directly.

PrincipalName

Exposes the subject's canonicalized principal name as a single-valued attribute

Scoped

Applies a (fixed) scope to the input attribute's values

Prescoped

Splits input attribute values into values and scopes

RegexSplit

Splits input attribute values according to a regular expression

ScriptedAttribute

Generates an attributes using a JSR-223 script

Mapped

Allows many to many mapping of input values to output values according to regular expression mapping rules

Template

Feeds the input values (potentially from multiple input attributes) into a Velocity template to construct output values

SubjectDerived

Extracts individual attribute data from authenticated Subject(s), this is frequently better handled now by the Subject DataConnector

ContextDerived

Extract arbitrary data from the request context via a Function bean

Decrypted 4.1

Decrypt input values using a DataSealer.

...