AttributeExtractor

The <AttributeExtractor> element configures the component used by the SP to turn SAML content into "attributes", the internal/neutral representation of information stored with user sessions.

While there are no specifically "mandated" points at which extractors run, the SP generally invokes extraction following the acceptance of assertions during SSO and as a result of attribute resolution from SAML-based sources such as an Attribute Authority. Actually performing the filtering process is typically up to an Assertion Consumer Service handler (in the case of attributes delivered during SSO) or an attribute resolver.

In general, extractors can be handed many different XML element types and are free to process them or ignore them as their implementation or configuration dictates.

Extractor Types

Several different Attribute Extractors are available. They are selected using the type= attribute. Each type has its own Child Elements and Attributes.