The Shibboleth IdP V4 software will leave support on September 1, 2024.

ReturnAttributes

Owned by Scott Cantor
Last updated: Aug 02, 2021 by Rod Widdowson

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Overview

The <ReturnAttributes> element contains a whitespace-delimited list of attributes to be returned from the LDAP directory, to optimize the lookup. It carries no attribute or child element content.

Examples

<ReturnAttributes>ATTRIBUTE_1 ATTRIBUTE_2 ATTRIBUTE_3</ReturnAttributes>

On OpenLDAP directory servers, operational attributes must be explicitly requested for them to be returned. If you'd like to return all attributes ( * ) from an OpenLDAP directory, and the operational attributes ( + ), use the following:

<ReturnAttributes>* +</ReturnAttributes>