Versions Compared

Old Version 6

changes.mady.by.user Rod Widdowson

Saved on

compared with

New Version Current

changes.mady.by.user Scott Cantor

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The SAML1XMLObject attribute encoder encodes a XMLObject-valued IdPAttribute as a SAML 1 Attribute. 

Reference

localtab-live
Localtabgroup
Expand
titleSpecific XML Attributes

Name

Type

Req?

Default

Description

name

string

Y

                                                                                                      

Value to put into the

"

Name

"

attribute of the output <AttributeValue> elements

namespace

string

urn:mace:shibboleth:1.0:attributeNamespace:uri

Value to put into the

"

AttributeNamespace

"

attribute of the output

 <AttributeValue>

<AttributeValue>elements

localtab-live
Expand
titleCommon XML Attributes
localtab-live
Include Page
AttributeEncoderCommonAttributes
AttributeEncoderCommonAttributes
Expand
titleCommon XML Elements
Include Page
AttributeEncoderCommonElements
AttributeEncoderCommonElements

...

The AttributeNamespace XML attribute in SAML 1 is a nasty little piece of work that was badly defined and very inconsistently implemented (often nonsenicallynonsensically) by different implementations of SAML 1. Shibboleth used this attribute in a manner analagous to the SAML 2 NameFormat attribute that took its place, and defaults to using a URI constant we defined in the very earliest releases to signal that the AttributeName would be a URI and stand on its own. You will typically find that other implementations will require you to override this with some value they invent out of whole cloth. No value is right or wrong, it's an unfortunate mistake that just has to be worked around on a case by case basis.