The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Overview

The <ReturnAttributes> element contains a whitelist-delimited list of attributes to be returned from the LDAP directory, to optimize the lookup. It carries no attribute or child element content.

Examples

 <ReturnAttributes>ATTRIBUTE_1 ATTRIBUTE_2 ATTRIBUTE_3</ReturnAttributes>

On OpenLDAP directory servers, operational attributes must be explicitly requested for them to be returned. If you'd like to return all attributes ( * ) from an OpenLDAP directory, and the operational attributes ( + ), use the following:

 <ReturnAttributes>* +</ReturnAttributes>
  • No labels