The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.

ReturnAttributes

Owned by Scott Cantor
Last updated: Aug 02, 2021 by Rod Widdowson
1 min read

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Overview

The <ReturnAttributes> element contains a whitespace-delimited list of attributes to be returned from the LDAP directory, to optimize the lookup. It carries no attribute or child element content.

Examples

<ReturnAttributes>ATTRIBUTE_1 ATTRIBUTE_2 ATTRIBUTE_3</ReturnAttributes>

On OpenLDAP directory servers, operational attributes must be explicitly requested for them to be returned. If you'd like to return all attributes ( * ) from an OpenLDAP directory, and the operational attributes ( + ), use the following:

<ReturnAttributes>* +</ReturnAttributes>