The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.

ScopedAttributeDefinition

Owned by Scott Cantor
Last updated: Nov 10, 2021
1 min read

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Overview

The Scoped AttributeDefinition applies a (fixed) scope, typically a domain-valued suffix, to an input attribute's values. The resulting attribute's values are of type ScopedStringAttributeValue.

Reference

Exactly one of these two attributes must be present:

Name

Type

Description

Name

Type

Description

scope

String

Provides the scope/suffix to add. In the example/default configuration, the scope value is pulled from the idp.scope property in conf/idp.properties

scopeFromDependency 4.1 

String

The ID of an attribute definition to be used as a the scope.  This attribute scopeFromDependency MUST

  • be specified as a <InputAttributeDefinition> (in addition to any other Input dependencies)

  • have exactly one value

  • which must be a String

Examples

<AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}"> <InputAttributeDefinition ref="uid" /> </AttributeDefinition>
<AttributeDefinition id="eduPersonScopedAffilition" xsi:type="Scoped" scopeFromDependency="upStreamIdP"> <InputAttributeDefinition ref="affitional" /> <InputAttributeDefinition ref="upStreamIdP" /> </AttributeDefinition>

Â