Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Overview

The Scoped AttributeDefinition applies a (fixed) scope, typically a domain-valued suffix, to an input attribute's values. The resulting attribute's values are of type ScopedStringAttributeValue.

Reference

Exactly one of these two attributes must be present

Name

Type

Description

scope

String

Provides the scope/suffix to add. In the example/default configuration, the scope value is pulled from the idp.scope property in conf/idp.properties

scopeFromDependency 4.1 

String

The ID of an attribute definition to be used as a the scope.  This attribute scopeFromDependency MUST

  • Be specified as a <InputAttributeDefinition> (in addition to any other Input dependencies)

  • Have exactly one value

  • Which must be a String.

Example

<AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}">
    <InputAttributeDefinition ref="uid" />
</AttributeDefinition>


<AttributeDefinition id="eduPersonScopedAffilition" xsi:type="Scoped" scopeFromDependency="upStreamIdP">
    <InputAttributeDefinition ref="affitional" />
    <InputAttributeDefinition ref="upStreamIdP" />
</AttributeDefinition>