SimpleAttributeDefinition

The Shibboleth V1 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only.

SimpleAttributeDefinition

Configuring a Simple Attribute Definition

This simple plugin passes attribute values recieved from a data connector through so that they are made available to the Attribute Release Policy engine, which in turn may release them to the service provider.

Configuring the Definition

In the basic configuration this definition assumes that the attribute from the connector is named exactly the name given in the id attribute or, if the name contains a #, :, or /, the substring consisting of the first character after the final delimeter to the end of the string.

  1. Create a SimpleAttributeDefinition element with its id attribute, whose value is the name of the attribute to be released

Example Configuration

Assumes an attribute from at least on connector named "memberOf"

<SimpleAttributeDefinition id="memberOf" />

Assumes an attribute from a connectrom named "eduPersonAffiliation"

<SimpleAttribtueDefinition id="urn:mace:dir:attribute-def:eduPersonAffiliation" />

Advanced Configurations

The following, more advanced, attributes may be added to a SimpleAttributeDefinition element:

  • sourceName - used to specify the exact name of the source attribute instead of using the convetion described above

  • allowEmpty - whether to allow the attribute to have an emptry string as a value; acceptable values: true or false

  • smartScope - a scope to be appended to an attribute value if that value does not already contain one

Example Configuration

This example maps the attribute "guPersonAffiliation" to "urn:mace:dir:attribute-def:eduPersonAffiliation". This is good for renaming attributes.

<SimpleAttributeDefinition id="urn:mace:dir:attribute-def:eduPersonAffiliation" sourceName="guPersonAffiliation" />

This example shows how to create an eduPersonScopedAffiliation attribute given a eduPersonAffiliation

<SimpleAttributeDefinition id="urn:mace:dir:attribute-def:eduPersonScopeAffiliation" sourceName="urn:mace:dir:attribute-def:eduPersonAffiliation" smartScope="georgetown.edu"> <AttributeDependency requires="urn:mace:dir:attribute-def:eduPersonAffiliation" /> </SimpleAttributeDefinition>