ScopedAttributeDefinition

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

1 Overview
2 Reference
3 Examples

Overview

The Scoped AttributeDefinition applies a (fixed) scope, typically a domain-valued suffix, to an input attribute's values. The resulting attribute's values are of type ScopedStringAttributeValue.

Reference

Exactly one of these two attributes must be present: Name Type Description scope String Provides the scope/suffix to add. In the example/default configuration, the scope value is pulled from the idp.scope property in conf/idp.properties scopeFromDependency 4.1 String The ID of an attribute definition to be used as a the scope. This attribute scopeFromDependency MUST be specified as a <InputAttributeDefinition> (in addition to any other Input dependencies) have exactly one value which must be a String

Examples

<AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}">
    <InputAttributeDefinition ref="uid" />
</AttributeDefinition>

<AttributeDefinition id="eduPersonScopedAffilition" xsi:type="Scoped" scopeFromDependency="upStreamIdP">
    <InputAttributeDefinition ref="affitional" />
    <InputAttributeDefinition ref="upStreamIdP" />
</AttributeDefinition>