The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.
InputAttributeDefinition
This element is available in V3.4 and later of the software.
Overview
This element defines an attribute used as input to the containing <AttributeDefinition>
or <DataConnector>
.
This element is defined by the urn:mace:shibboleth:2.0:resolver
 schema, which is located at http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd
Attribute
Name | Type | Description |
---|---|---|
ref | String | This is the identifier of an <AttributeDefintion> plugin |
Semantics
The precise semantics of this element depend on the type of the enclosing <AttributeDefinition>
or <DataConnector>
.
Multi-Attribute Definitions
Multi-attribute definitions refers to <AttributeDefinition>
or <DataConnector>
types which consume multiple attributes. The current supported definitions are:
- the Scripted DataConnector and AttributeDefinition
- the Template Attribute Definition
- the RDBMS and LDAP connectors
In this case the attribute and all its values are made available to the enclosing definition. Â If an attribute of the same name has already been provided, then the values are combined.
Multi-Value Definitions
Multi-value definitions refers to <AttributeDefinition>
or <DataConnector>
types which consume multiple attribute values. These values are often, but not always, from one definition. Nearly all attribute definitions are multi-value. The ComputedIdConnector is a degenerate Multi-Value Definition in that it requires a single value (which may come from multiple sources, all but one of which would be empty).
In this case all the attribute values are made available. Values from multiple attributes are combined.