The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.
SAML1Base64Encoder
The SAML1Base64
attribute encoder encodes a binary valued IdPAttribute as a SAML 1 Attribute via a Base64 encoding. .
Schema Name and Location
This xsi:type
is defined by the urn:mace:shibboleth:2.0:resolver
 schema 3.3, which is located at http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd.
Prior to V3.3 supplied plugins were defined by a schema type (xsi:type) in the urn:mace:shibboleth:2.0:encoder schema
 , which is located at http://shibboleth.net/schema/idp/shibboleth-attribute-encoder.xsd.  This is still supported, but every element or type in the  urn:mace:shibboleth:2.0:encoder schema
 has an identically named version in the urn:mace:shibboleth:2.0:resolver
 schema.
Attributes
Common Attributes
Name | Type | Default | Description |
---|---|---|---|
| boolean | true | Controls whether the output form will contain an encoder-specific indication of the data type of the values. In XML, this takes the form of xsi:type attributes, which greatly bloat the size and generally should be avoided for string-valued data. For compatibility with V2, the default is to continue to output the information, but we suggest disabling it in newer deployments and after testing against existing services. |
| Bean Reference | Bean ID of a condition bean that determines whether the encoder should be active, described further here. | |
| space-delimited list | List of entity IDs for which this Attribute Encoder should be active. |
Specific Attributes
Name | Type | Req? | Default | Description |
---|---|---|---|---|
name | string | Y | Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â | Value to put into the "AttributeName " attribute of the output <AttributeValue> elements |
namespace | string | urn:mace:shibboleth:1.0:attributeNamespace:uri | Value to put into the "AttributeNamespace " attribute of the output <AttributeValue> elements |
Example
<AttributeEncoder xsi:type="SAML1Base64" name="urn:mace:dir:attribute-def:displayName" encodeType="false" />
Notes
The AttributeNamespace
XML attribute in SAML 1 is a nasty little piece of work that was badly defined and very inconsistently implemented (often nonsenically) by different implementations of SAML 1. Shibboleth used this attribute in a manner analagous to the SAML 2Â NameFormat
attribute that took its place, and defaults to using a URI constant we defined in the very earliest releases to signal that the AttributeName
would be a URI and stand on its own. You will typically find that other implementations will require you to override this with some value they invent out of whole cloth. No value is right or wrong, it's an unfortunate mistake that just has to be worked around on a case by case basis.