1 <Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
4 The mappings are a mix of SAML 1.1 and SAML 2.0 attribute names agreed to within the Shibboleth
5 community. The non-OID URNs are SAML 1.1 names and most of the OIDs are SAML 2.0 names, with a
6 few exceptions for newer attributes where the name is the same for both versions. You will
7 usually want to uncomment or map the names for both SAML versions as a unit.
10 <!-- First some useful eduPerson attributes that many sites might use. -->
12 <Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName" id="eppn">
13 <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
15 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
16 <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
19 <Attribute name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" id="affiliation">
20 <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
22 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="affiliation">
23 <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
26 <Attribute name="urn:mace:dir:attribute-def:eduPersonAffiliation" id="unscoped-affiliation">
27 <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
29 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" id="unscoped-affiliation">
30 <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
33 <Attribute name="urn:mace:dir:attribute-def:eduPersonEntitlement" id="entitlement"/>
34 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="entitlement"/>
36 <!-- A persistent id attribute that supports personalized anonymous access. -->
38 <!-- First, the deprecated/incorrect version, decoded as a scoped string: -->
39 <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="targeted-id">
40 <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
41 <!-- <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/> -->
44 <!-- Second, an alternate decoder that will decode the incorrect form into the newer form. -->
46 <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="persistent-id">
47 <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
51 <!-- Third, the new version (note the OID-style name): -->
52 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="persistent-id">
53 <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
56 <!-- Fourth, the SAML 2.0 NameID Format: -->
57 <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
58 <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
61 <!-- Some more eduPerson attributes, uncomment these to use them... -->
63 <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" id="primary-affiliation">
64 <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
66 <Attribute name="urn:mace:dir:attribute-def:eduPersonNickname" id="nickname"/>
67 <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN" id="primary-orgunit-dn"/>
68 <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" id="orgunit-dn"/>
69 <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgDN" id="org-dn"/>
71 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" id="primary-affiliation">
72 <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
74 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.2" id="nickname"/>
75 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.8" id="primary-orgunit-dn"/>
76 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.4" id="orgunit-dn"/>
77 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.3" id="org-dn"/>
79 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="assurance"/>
81 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.5.1.1" id="member"/>
83 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.6.1.1" id="eduCourseOffering"/>
84 <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.6.1.2" id="eduCourseMember"/>
87 <!-- Examples of LDAP-based attributes, uncomment to use these... -->
89 <Attribute name="urn:mace:dir:attribute-def:cn" id="cn"/>
90 <Attribute name="urn:mace:dir:attribute-def:sn" id="sn"/>
91 <Attribute name="urn:mace:dir:attribute-def:givenName" id="givenName"/>
92 <Attribute name="urn:mace:dir:attribute-def:displayName" id="displayName"/>
93 <Attribute name="urn:mace:dir:attribute-def:mail" id="mail"/>
94 <Attribute name="urn:mace:dir:attribute-def:telephoneNumber" id="telephoneNumber"/>
95 <Attribute name="urn:mace:dir:attribute-def:title" id="title"/>
96 <Attribute name="urn:mace:dir:attribute-def:initials" id="initials"/>
97 <Attribute name="urn:mace:dir:attribute-def:description" id="description"/>
98 <Attribute name="urn:mace:dir:attribute-def:carLicense" id="carLicense"/>
99 <Attribute name="urn:mace:dir:attribute-def:departmentNumber" id="departmentNumber"/>
100 <Attribute name="urn:mace:dir:attribute-def:employeeNumber" id="employeeNumber"/>
101 <Attribute name="urn:mace:dir:attribute-def:employeeType" id="employeeType"/>
102 <Attribute name="urn:mace:dir:attribute-def:preferredLanguage" id="preferredLanguage"/>
103 <Attribute name="urn:mace:dir:attribute-def:manager" id="manager"/>
104 <Attribute name="urn:mace:dir:attribute-def:seeAlso" id="seeAlso"/>
105 <Attribute name="urn:mace:dir:attribute-def:facsimileTelephoneNumber" id="facsimileTelephoneNumber"/>
106 <Attribute name="urn:mace:dir:attribute-def:street" id="street"/>
107 <Attribute name="urn:mace:dir:attribute-def:postOfficeBox" id="postOfficeBox"/>
108 <Attribute name="urn:mace:dir:attribute-def:postalCode" id="postalCode"/>
109 <Attribute name="urn:mace:dir:attribute-def:st" id="st"/>
110 <Attribute name="urn:mace:dir:attribute-def:l" id="l"/>
111 <Attribute name="urn:mace:dir:attribute-def:o" id="o"/>
112 <Attribute name="urn:mace:dir:attribute-def:ou" id="ou"/>
113 <Attribute name="urn:mace:dir:attribute-def:businessCategory" id="businessCategory"/>
114 <Attribute name="urn:mace:dir:attribute-def:physicalDeliveryOfficeName" id="physicalDeliveryOfficeName"/>
116 <Attribute name="urn:oid:2.5.4.3" id="cn"/>
117 <Attribute name="urn:oid:2.5.4.4" id="sn"/>
118 <Attribute name="urn:oid:2.5.4.42" id="givenName"/>
119 <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>
120 <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="mail"/>
121 <Attribute name="urn:oid:2.5.4.20" id="telephoneNumber"/>
122 <Attribute name="urn:oid:2.5.4.12" id="title"/>
123 <Attribute name="urn:oid:2.5.4.43" id="initials"/>
124 <Attribute name="urn:oid:2.5.4.13" id="description"/>
125 <Attribute name="urn:oid:2.16.840.1.113730.3.1.1" id="carLicense"/>
126 <Attribute name="urn:oid:2.16.840.1.113730.3.1.2" id="departmentNumber"/>
127 <Attribute name="urn:oid:2.16.840.1.113730.3.1.3" id="employeeNumber"/>
128 <Attribute name="urn:oid:2.16.840.1.113730.3.1.4" id="employeeType"/>
129 <Attribute name="urn:oid:2.16.840.1.113730.3.1.39" id="preferredLanguage"/>
130 <Attribute name="urn:oid:0.9.2342.19200300.100.1.10" id="manager"/>
131 <Attribute name="urn:oid:2.5.4.34" id="seeAlso"/>
132 <Attribute name="urn:oid:2.5.4.23" id="facsimileTelephoneNumber"/>
133 <Attribute name="urn:oid:2.5.4.9" id="street"/>
134 <Attribute name="urn:oid:2.5.4.18" id="postOfficeBox"/>
135 <Attribute name="urn:oid:2.5.4.17" id="postalCode"/>
136 <Attribute name="urn:oid:2.5.4.8" id="st"/>
137 <Attribute name="urn:oid:2.5.4.7" id="l"/>
138 <Attribute name="urn:oid:2.5.4.10" id="o"/>
139 <Attribute name="urn:oid:2.5.4.11" id="ou"/>
140 <Attribute name="urn:oid:2.5.4.15" id="businessCategory"/>
141 <Attribute name="urn:oid:2.5.4.19" id="physicalDeliveryOfficeName"/>