Prescoped Attribute Definition
A prescoped attribute definition creates scoped attribute values by splitting the values of a source attribute. The first atom becomes the attribute value and the second becomes the scope. For example, firstname.lastname@example.org, when using the default scope delimiter '@', will have a value of 'staff' and a scope of 'example.org'.
The following steps walk through creating a scoped attribute definition.
1. Define the Definition
The definition is defined with the element
<resolver:AttributeDefinition xsi:type="Prescoped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"> with the following required attribute:
- id - assigns a unique, within the resolver, identifier that may be used to reference this definition
and the following optional attributes:
- scopeDelimiter - specifies the delimiter between the value and the scope within the source attribute values (default value: @)
- dependencyOnly - a boolean flag that indicates that the attribute produced by this definition is used only by other resolver components and should not be released from the resolver; defaults to false
- sourceAttributeID - the ID of the attribute, from the dependency connectors, used to construct this attribute (default value: ID of this attribute)
2. Define Dependencies
It is very common for one component, like attribute definitions, within the attribute resolver to depend on information retrieved or constructed from another component.
Dependencies are expressed by the
<resolver:Dependency> with a
ref attribute whose value is the unique ID of the attribute definition or the data connector that this connector depends on.