The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.

PrincipalNameAttributeDefinition

Owned by Rod Widdowson
Last updated: Aug 04, 2017 by Scott Cantor

The PrincipalName attribute definition exposes the subject's canonicalized principal name as a single-valued IdPAttribute.

Schema Name and Location

This xsi:type is defined in the urn:mace:shibboleth:2.0:resolver namespace 3.3, the schema for which is located at http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Prior to V3.3 supplied plugins were defined by a schema type in the urn:mace:shibboleth:2.0:resolver:ad namespace, the schema for which is located at http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-ad.xsd. This is still supported, but every element or type in the deprecated namespace has an equivalently named (but not necessarily identical) version in the urn:mace:shibboleth:2.0:resolver namespace. The use of the urn:mace:shibboleth:2.0:resolver namespace also allows a relaxation of the ordering requirements of child elements to reduce strictness.

Attributes

Any of the common attributes can be specified. Note that this attribute definition does not require a sourceAttributeID attribute since the information is not resolved from an input attribute. If one is supplied, it is ignored.

Child Elements

Any of the common child elements can be specified. Note that this attribute definition does not require a dependency child element since the information is not resolved from an input attribute. If any are supplied, then they are ignored.

Example

<AttributeDefinition id="uid" xsi:type="PrincipalName">
    <AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" />
    <AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" />
</AttributeDefinition>