Page tree

The Shibboleth 2.x software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP30 and SP3 wiki spaces for current documentation on the supported versions.

Skip to end of metadata
Go to start of metadata

Relying Party SAML 2 Attribute Query Profile Configuration

This profile configuration enables and configures the SAML 2 Attribute Query profile.

Basic Configuration

This profile is configured by adding the <ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile" /> element to a RelyingParty definition.

Example SAML2 Attribute Query Profile Configuration
<ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile" />

Advanced Configuration

The SAML2 Attribute Query profile configuration supports the following advanced configuration attributes:

In addition, the SAML 2 Attribute Query profile configuration element supports two child elements.

  • <Audience>, whose content is used to populate the <Audience> elements of <AudienceRestriction> element. This element may appear any number of times, one for each audience.
  • <ProxyAudience>, whose content is used to populate the <Audience> elements of the <ProxyRestriction> condition element. This element may appear any number of times, one for each audience.