SAML1XMLObject

The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.

SAML1XMLObject

Name

Cardinality

Description

Name

Cardinality

Description

<ActivationConditionScript>

0 or 1

Optional embedded script to supply an activation condition for the encoder. Mutually exclusive with the activationConditionRef and relyingParties XML Attributes.

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

The SAML1XMLObject attribute encoder encodes a XMLObject-valued IdPAttribute as a SAML 1 Attribute. 

Reference

Name

Type

Req?

Default

Description

Name

Type

Req?

Default

Description

name

string

Y

 

Value to put into the Name attribute of the output <AttributeValue> elements

namespace

string

 

urn:mace:shibboleth:1.0:attributeNamespace:uri

Value to put into the AttributeNamespace attribute of the output <AttributeValue>elements

NameTypeDefaultDescription
encodeTypebooleantrueControls whether the output form will contain an encoder-specific indication of the data type of the values. In XML, this takes the form of xsi:type attributes, which greatly bloat the size and generally should be avoided for string-valued data. The default is to continue to output the information, but we suggest disabling it in newer deployments and after testing against existing services.
activationConditionRefBean Reference

Bean ID of a condition bean that determines whether the encoder should be active, described further here.
Mutually exclusive with relyingParties attribute and <ActivationConditionScript> element

relyingPartieswhitespace-delimited list

List of entity IDs for which this Attribute Encoder should be active.
Mutually exclusive with activationConditionRef attribute and <ActivationConditionScript> element

Name

Cardinality

Description

Name

Cardinality

Description

<ActivationConditionScript>

0 or 1

Optional embedded script to supply an activation condition for the encoder. Mutually exclusive with the activationConditionRef and relyingParties XML Attributes.

Example

<AttributeEncoder xsi:type="enc:SAML1XMLObject" name="urn:oid:......." encodeType="true" />

Notes

The AttributeNamespace XML attribute in SAML 1 is a nasty little piece of work that was badly defined and very inconsistently implemented (often nonsensically) by different implementations of SAML 1. Shibboleth used this attribute in a manner analagous to the SAML 2 NameFormat attribute that took its place, and defaults to using a URI constant we defined in the very earliest releases to signal that the AttributeName would be a URI and stand on its own. You will typically find that other implementations will require you to override this with some value they invent out of whole cloth. No value is right or wrong, it's an unfortunate mistake that just has to be worked around on a case by case basis.