Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Overview

The Scoped AttributeDefinition applies a (fixed) scope, typically a domain-valued suffix, to an input attribute's values. The resulting attribute's values are of type ScopedStringAttributeValue.

Reference

Exactly one of these two attributes must be present:

Name

Type

Description

scope

String

Provides the scope/suffix to add. In the example/default configuration, the scope value is pulled from the idp.scope property in conf/idp.properties

scopeFromDependency 4.1 

String

The ID of an attribute definition to be used as a the scope.  This attribute scopeFromDependency MUST

  • be specified as a <InputAttributeDefinition> (in addition to any other Input dependencies)

  • have exactly one value

  • which must be a String

Examples

<AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}">
    <InputAttributeDefinition ref="uid" />
</AttributeDefinition>
<AttributeDefinition id="eduPersonScopedAffilition" xsi:type="Scoped" scopeFromDependency="upStreamIdP">
    <InputAttributeDefinition ref="affitional" />
    <InputAttributeDefinition ref="upStreamIdP" />
</AttributeDefinition>