Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd
Overview
The Prescoped attribute definition AttributeDefinition turns a simple string-valued attribute input into a two-part scoped attribute values by splitting the input attribute values into three parts, the value, a (fixed) delimiter, and the scope/suffix. Such attributes can be used as input to the SAML2ScopedStringEncoder and SAML1ScopedStringAttributeEncoder attribute encoders.The prescoped attribute The resulting attribute's values are of type ScopedStringAttributeValue.
This definition is useful when a data connector DataConnector returns attributes with values which already have an appropriate delimiter and scope appended in the source system.
Configuration Reference
Attributes
...
Reference
| Localtabgroup |
|---|
| Localtab |
|---|
| active | true |
|---|
| title | Specific XML Attributes |
|---|
| | Name | Type | Default | Description |
|---|
scopeDelimiter | String | @ | Defines the delimiter which separates the value from the scope |
|
|
...
Child Elements
...
| Localtab |
|---|
| title | Common XML Attributes |
|---|
| | Include Page |
|---|
| AttributeDefinitionCommonAttributes |
|---|
| AttributeDefinitionCommonAttributes |
|---|
|
|
| Localtab |
|---|
| | Include Page |
|---|
| AttributeDefinitionCommonChildElements |
|---|
| AttributeDefinitionCommonChildElements |
|---|
|
|
|
Example
| Code Block |
|---|
|
<AttributeDefinition xsi:type="Prescoped" id="eduPersonPrincipalName">
<InputDataConnector ref="myLDAP" attributeNames="eduPersonPrincipalName" />
<AttributeEncoder xsi:type="SAML1ScopedString" name="urn:mace:dir:attribute-def:eduPersonPrincipalName" encodeType="false" />
<AttributeEncoder xsi:type="SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" friendlyName="eduPersonPrincipalName" encodeType="false" />
</AttributeDefinition> |