SAML2DateTimeEncoder

SAML2DateTimeEncoder

This feature requires IdP V4.3+.

Namespace: urn:mace:shibboleth:2.0:resolver
Schema: http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd

The SAML2DateTime attribute encoder encodes a date/time-valued IdPAttribute as a SAML 2 Attribute. Date/time values are represented internally as a Java Instant, which is the simplest/least ambiguous way to represent a point in time.

XML defines a textual representation of date/time information in ISO format, and SAML requires all such values to be in UTC to avoid time zone confusion. This encoder automatically encodes the values in that format.

Reference

Name

Type

Req?

Default

Description

Name

Type

Req?

Default

Description

name

string

Y

                                                                                                          

Value to put into the Name attribute of the output <AttributeValue> elements

nameFormat

string

 

urn:oasis:names:tc:SAML:2.0:attrname-format:uri

Value to put into the NameFormat attribute of the output <AttributeValue> elements

friendlyName

string

 

The enclosing attribute's ID

Value to put into the FriendlyName attribute of the output <AttributeValue> elements

NameTypeDefaultDescription
encodeTypebooleantrueControls whether the output form will contain an encoder-specific indication of the data type of the values. In XML, this takes the form of xsi:type attributes, which greatly bloat the size and generally should be avoided for string-valued data. The default is to continue to output the information, but we suggest disabling it in newer deployments and after testing against existing services.
activationConditionRefBean Reference

Bean ID of a condition bean that determines whether the encoder should be active, described further here.
Mutually exclusive with relyingParties attribute and <ActivationConditionScript> element

relyingPartieswhitespace-delimited list

List of entity IDs for which this Attribute Encoder should be active.
Mutually exclusive with activationConditionRef attribute and <ActivationConditionScript> element

Name

Cardinality

Description

Name

Cardinality

Description

<ActivationConditionScript>

0 or 1

Optional embedded script to supply an activation condition for the encoder. Mutually exclusive with the activationConditionRef and relyingParties XML Attributes.