Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Prior to V3.3 supplied plugins were defined by a schema type (xsi:type) in the urn:mace:shibboleth:2.0:resolver:dc namespace, the schema for which is located at http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-dc.xsd. This is still supported, but every element or type in the  urn:mace:shibboleth:2.0:resolver:dc namespace has an equivalently named (but not necessarily identical) version in the urn:mace:shibboleth:2.0:resolver namespace. The use of the urn:mace:shibboleth:2.0:resolver namespace also allows a relaxation of the ordering requirements of child elements to reduce strictness.\

Reference

Attributes

Any of the common attributes can be specified. In addition the following attributes are supported:

NameTypeDefaultDescription
generatedAttributeID
stringID of the connectorThe id of the IdPAttribute that is generated
sourceAttributeIDstring, required

DEPRECATED in V3.4

The id of the IdPAttribute used as input to the computed ID, required for older versions

saltstring. required
A salt, of at least 16 bytes, used in the computed ID

encoding 3.3.2

stringBASE64Controls the eventual text encoding of the value, this should be set to "BASE32" for new deployments (see the warning box about case sensitivity under PersistentNameIDGenerationConfiguration)
algorithm 3.4stringSHAControls the digest algorithm applied

...

Any of the common child elements can be specified.

Examples

TODO: update this example with the new Dependency syntaxThe example produces a hashed value using an input value "Foo" from a DataConnector named "DataSourceForFoo".

Code Block
languagexml
<DataConnector id="ComputedIDConnector" xsi:type="ComputedId" 
    sourceAttributeID="Foo"
	generatedAttributeID="ComputedID"
	salt="abcdefghijklmnopqrstuvwxyz"
	encoding="BASE32">

	<Dependency<InputDataConnector ref="DataSourceForFoo" attributeNames="AttributeSourceForFooFoo" />

</DataConnector>