configs/attribute-map.xml

   1 <Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
   2
   3     <!--
   4     The mappings are a mix of SAML 1.1 and SAML 2.0 attribute names agreed to within the Shibboleth
   5     community. The non-OID URNs are SAML 1.1 names and most of the OIDs are SAML 2.0 names, with a
   6     few exceptions for newer attributes where the name is the same for both versions. You will
   7     usually want to uncomment or map the names for both SAML versions as a unit.
   8     -->
   9
  10     <!-- First some useful eduPerson attributes that many sites might use. -->
  11
  12     <Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName" id="eppn">
  13         <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
  14     </Attribute>
  15     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
  16         <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
  17     </Attribute>
  18
  19     <Attribute name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" id="affiliation">
  20         <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
  21     </Attribute>
  22     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="affiliation">
  23         <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
  24     </Attribute>
  25
  26     <Attribute name="urn:mace:dir:attribute-def:eduPersonAffiliation" id="unscoped-affiliation">
  27         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
  28     </Attribute>
  29     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" id="unscoped-affiliation">
  30         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
  31     </Attribute>
  32
  33     <Attribute name="urn:mace:dir:attribute-def:eduPersonEntitlement" id="entitlement"/>
  34     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="entitlement"/>
  35
  36     <!-- A persistent id attribute that supports personalized anonymous access. -->
  37
  38     <!-- First, the deprecated/incorrect version, decoded as a scoped string: -->
  39     <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="targeted-id">
  40         <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
  41         <!-- <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/> -->
  42     </Attribute>
  43
  44     <!-- Second, an alternate decoder that will decode the incorrect form into the newer form. -->
  45     <!--
  46     <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="persistent-id">
  47         <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
  48     </Attribute>
  49     -->
  50
  51     <!-- Third, the new version (note the OID-style name): -->
  52     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="persistent-id">
  53         <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
  54     </Attribute>
  55
  56     <!-- Fourth, the SAML 2.0 NameID Format: -->
  57     <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
  58         <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
  59     </Attribute>
  60
  61     <!-- Some more eduPerson attributes, uncomment these to use them... -->
  62     <!--
  63     <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" id="primary-affiliation">
  64         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
  65     </Attribute>
  66     <Attribute name="urn:mace:dir:attribute-def:eduPersonNickname" id="nickname"/>
  67     <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN" id="primary-orgunit-dn"/>
  68     <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" id="orgunit-dn"/>
  69     <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgDN" id="org-dn"/>
  70
  71     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" id="primary-affiliation">
  72         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
  73     </Attribute>
  74     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.2" id="nickname"/>
  75     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.8" id="primary-orgunit-dn"/>
  76     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.4" id="orgunit-dn"/>
  77     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.3" id="org-dn"/>
  78
  79     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="assurance"/>
  80
  81     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.5.1.1" id="member"/>
  82
  83     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.6.1.1" id="eduCourseOffering"/>
  84     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.6.1.2" id="eduCourseMember"/>
  85     -->
  86
  87     <!-- Examples of LDAP-based attributes, uncomment to use these... -->
  88     <!--
  89     <Attribute name="urn:mace:dir:attribute-def:cn" id="cn"/>
  90     <Attribute name="urn:mace:dir:attribute-def:sn" id="sn"/>
  91     <Attribute name="urn:mace:dir:attribute-def:givenName" id="givenName"/>
  92     <Attribute name="urn:mace:dir:attribute-def:displayName" id="displayName"/>
  93     <Attribute name="urn:mace:dir:attribute-def:uid" id="uid"/>
  94     <Attribute name="urn:mace:dir:attribute-def:mail" id="mail"/>
  95     <Attribute name="urn:mace:dir:attribute-def:telephoneNumber" id="telephoneNumber"/>
  96     <Attribute name="urn:mace:dir:attribute-def:title" id="title"/>
  97     <Attribute name="urn:mace:dir:attribute-def:initials" id="initials"/>
  98     <Attribute name="urn:mace:dir:attribute-def:description" id="description"/>
  99     <Attribute name="urn:mace:dir:attribute-def:carLicense" id="carLicense"/>
 100     <Attribute name="urn:mace:dir:attribute-def:departmentNumber" id="departmentNumber"/>
 101     <Attribute name="urn:mace:dir:attribute-def:employeeNumber" id="employeeNumber"/>
 102     <Attribute name="urn:mace:dir:attribute-def:employeeType" id="employeeType"/>
 103     <Attribute name="urn:mace:dir:attribute-def:preferredLanguage" id="preferredLanguage"/>
 104     <Attribute name="urn:mace:dir:attribute-def:manager" id="manager"/>
 105     <Attribute name="urn:mace:dir:attribute-def:seeAlso" id="seeAlso"/>
 106     <Attribute name="urn:mace:dir:attribute-def:facsimileTelephoneNumber" id="facsimileTelephoneNumber"/>
 107     <Attribute name="urn:mace:dir:attribute-def:street" id="street"/>
 108     <Attribute name="urn:mace:dir:attribute-def:postOfficeBox" id="postOfficeBox"/>
 109     <Attribute name="urn:mace:dir:attribute-def:postalCode" id="postalCode"/>
 110     <Attribute name="urn:mace:dir:attribute-def:st" id="st"/>
 111     <Attribute name="urn:mace:dir:attribute-def:l" id="l"/>
 112     <Attribute name="urn:mace:dir:attribute-def:o" id="o"/>
 113     <Attribute name="urn:mace:dir:attribute-def:ou" id="ou"/>
 114     <Attribute name="urn:mace:dir:attribute-def:businessCategory" id="businessCategory"/>
 115     <Attribute name="urn:mace:dir:attribute-def:physicalDeliveryOfficeName" id="physicalDeliveryOfficeName"/>
 116
 117     <Attribute name="urn:oid:2.5.4.3" id="cn"/>
 118     <Attribute name="urn:oid:2.5.4.4" id="sn"/>
 119     <Attribute name="urn:oid:2.5.4.42" id="givenName"/>
 120     <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>
 121     <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid"/>
 122     <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="mail"/>
 123     <Attribute name="urn:oid:2.5.4.20" id="telephoneNumber"/>
 124     <Attribute name="urn:oid:2.5.4.12" id="title"/>
 125     <Attribute name="urn:oid:2.5.4.43" id="initials"/>
 126     <Attribute name="urn:oid:2.5.4.13" id="description"/>
 127     <Attribute name="urn:oid:2.16.840.1.113730.3.1.1" id="carLicense"/>
 128     <Attribute name="urn:oid:2.16.840.1.113730.3.1.2" id="departmentNumber"/>
 129     <Attribute name="urn:oid:2.16.840.1.113730.3.1.3" id="employeeNumber"/>
 130     <Attribute name="urn:oid:2.16.840.1.113730.3.1.4" id="employeeType"/>
 131     <Attribute name="urn:oid:2.16.840.1.113730.3.1.39" id="preferredLanguage"/>
 132     <Attribute name="urn:oid:0.9.2342.19200300.100.1.10" id="manager"/>
 133     <Attribute name="urn:oid:2.5.4.34" id="seeAlso"/>
 134     <Attribute name="urn:oid:2.5.4.23" id="facsimileTelephoneNumber"/>
 135     <Attribute name="urn:oid:2.5.4.9" id="street"/>
 136     <Attribute name="urn:oid:2.5.4.18" id="postOfficeBox"/>
 137     <Attribute name="urn:oid:2.5.4.17" id="postalCode"/>
 138     <Attribute name="urn:oid:2.5.4.8" id="st"/>
 139     <Attribute name="urn:oid:2.5.4.7" id="l"/>
 140     <Attribute name="urn:oid:2.5.4.10" id="o"/>
 141     <Attribute name="urn:oid:2.5.4.11" id="ou"/>
 142     <Attribute name="urn:oid:2.5.4.15" id="businessCategory"/>
 143     <Attribute name="urn:oid:2.5.4.19" id="physicalDeliveryOfficeName"/>
 144     -->
 145
 146 </Attributes>