The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.


The <ReturnAttributes> element contains a list of attributes to be returned from the LDAP directory, to optimize the lookup.

Schema Name and Location

This element is defined by the urn:mace:shibboleth:2.0:resolver schema, which is located at


 <ReturnAttributes>ATTRIBUTE_1 ATTRIBUTE_2 ATTRIBUTE_3</ReturnAttributes>

On OpenLDAP directory servers, operational attributes must be explicitly requested for them to be returned. If you'd like to return all attributes ( * ) from an OpenLDAP directory, and the operational attributes ( + ), use the following:

 <ReturnAttributes>* +</ReturnAttributes>


No attributes are defined.

Child Elements

No child elements are defined.