The Shibboleth V2 IdP and SP software have reached End of Life and are no longer supported. This documentation is available for historical purposes only. See the IDP v4 and SP v3 wiki spaces for current documentation on the supported versions.


Direct Principal Connector

The direct principal connector treats the value of the name identifier as the principal name. That is no mapping between the name identifier is provided, but instead it is provided directly to IdP.

Define the Connector

A direct principal connectors starts with the same <resolver:PrincipalConnector> element as all other principal connectors and has a type attribute of xsi:type="pc:Direct". Each connector must contain a nameIDFormat attribute that identifies the name identifier format with which the connector works. Each connector must also have an id attribute that assigns it an unique, among principal connectors, identifier. This ID is used for logging and debugging purposes.

Direct Principal Connector Example
<resolver:PrincipalConnector id="UNIQUE_ID" xsi:type="pc:Direct" 

This connector, like all principal connectors, allow for the expression of data connector and attribute definition dependencies. However, if defined, they are unused as the information used to construct the attribute defined by this definition comes directly from the current state of the user's session.