Name | Cardinality | Description |
|---|---|---|
<ActivationConditionScript> | 0 or 1 | Optional embedded script to supply an activation condition for the encoder. Mutually exclusive with the activationConditionRef and relyingParties XML Attributes. |
Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd
The SAML1XMLObject attribute encoder encodes a XMLObject-valued IdPAttribute as a SAML 1 Attribute.
Reference
Example
<AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:......." encodeType="true" />
Notes
The AttributeNamespace XML attribute in SAML 1 is a nasty little piece of work that was badly defined and very inconsistently implemented (often nonsenically) by different implementations of SAML 1. Shibboleth used this attribute in a manner analagous to the SAML 2 NameFormat attribute that took its place, and defaults to using a URI constant we defined in the very earliest releases to signal that the AttributeName would be a URI and stand on its own. You will typically find that other implementations will require you to override this with some value they invent out of whole cloth. No value is right or wrong, it's an unfortunate mistake that just has to be worked around on a case by case basis.