Page tree

The Shibboleth 2.x software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP30 and SP3 wiki spaces for current documentation on the supported versions.

Skip to end of metadata
Go to start of metadata

Principal Authentication Method Attribute Definition

The principal authentication method attribute definition exposes all the currently active authentication methods for the user as a multi-valued attribute.

Define the Definition

The definition is defined with the element <resolver:AttributeDefinition xsi:type="PrincipalAuthenticationMethod" xmlns="urn:mace:shibboleth:2.0:resolver:ad"> with the following required attribute:

  • id - assigns a unique, within the resolver, identifier that may be used to reference this definition
Principal Authentication Method Attribute Definition
resolver:AttributeDefinition xsi:type="PrincipalAuthenticationMethod" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
                             id="UNIQUE_ID" />

While, like all other attribute definitions, this attribute definition can have dependencies; unlike all other attribute definitions, they are never used. The authentication method comes exclusively from internal IdP state and dependencies are ignored.

  • No labels