Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd
...
| Localtabgroup |
|---|
| Localtab live |
|---|
| title | Specific XML Attributes |
|---|
|
Name | Type | Default | Description |
|---|
language
| string | JavaScript | The default is ECMA script using either the Rhino (Java 7) or Nashorn (Java 8+) engines. This situation is in flux due to the removal of Nashorn from future Java versions, and there are plans to provide a V4.1+ plugin that supplies one of these options in the future at the deployer's discretion. | customObjectRef
| string |
| The name of a Spring Bean defined elsewhere. This bean will be made available to the script in a variable named "custom". |
| Localtab live |
|---|
| title | Specific XML Elements |
|---|
|
The following XML Elements are specific to this connector, and one of them must be supplied: Name | Description |
|---|
| Code Block |
|---|
<Script>
| The contents define the script to execute, usually wrapped in an XML CDATA block to avoid escaping code | <ScriptFile>
| The contents define a file which contains the script to execute |
| Localtab live |
|---|
| title | Common XML Attributes |
|---|
|
| Include Page |
|---|
| AttributeDefinitionCommonAttributes |
|---|
| AttributeDefinitionCommonAttributes |
|---|
|
| Include Page |
|---|
| AttributeDefinitionCommonChildElements |
|---|
| AttributeDefinitionCommonChildElements |
|---|
|
|
...
Get eduPersonPrincipalName from LDAP or build one from uid
Variant 1: A "Prescoped" AttributeDefinition resolves existing eduPersonPrincipalName values from LDAP, then depends on a "ScriptedAttribute" definition to generate missing values. The Script also needs a dependency on the myLDAP DataConnector in order to have access to existing eduPersonPrincipalName and uid attribute values.
Minimal scripting, using Dependencies (Nashorn)
...