/
ScopedAttributeDefinition

ScopedAttributeDefinition

Owned by Scott Cantor
Last updated: Nov 13, 2023

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

Overview

The Scoped AttributeDefinition applies a (fixed) scope, typically a domain-valued suffix, to an input attribute's values. The resulting attribute's values are of type ScopedStringAttributeValue.

Reference

Exactly one of these two attributes must be present:

Name

Type

Description

Name

Type

Description

scope

String

Provides the scope/suffix to add. In the example/default configuration, the scope value is pulled from the idp.scope property in conf/idp.properties

scopeFromDependency 

String

The ID of an attribute definition to be used as a the scope.  This attribute scopeFromDependency MUST

  • be specified as a <InputAttributeDefinition> (in addition to any other Input dependencies)

  • have exactly one value

  • which must be a String

Examples

<AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}"> <InputAttributeDefinition ref="uid" /> </AttributeDefinition>
<AttributeDefinition id="eduPersonScopedAffilition" xsi:type="Scoped" scopeFromDependency="upStreamIdP"> <InputAttributeDefinition ref="affitional" /> <InputAttributeDefinition ref="upStreamIdP" /> </AttributeDefinition>

 

Related content