configs/attribute-map.xml.in

   1 <Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map"
   2     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   3     xsi:schemaLocation="urn:mace:shibboleth:2.0:attribute-map @-PKGXMLDIR-@/shibboleth-2.0-attribute-map.xsd">
   4
   5         <!-- First some useful eduPerson attributes that many sites might use. -->
   6
   7         <Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName" id="eppn">
   8                 <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
   9         </Attribute>
  10         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
  11                 <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
  12         </Attribute>
  13
  14         <Attribute name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" id="affiliation">
  15                 <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
  16         </Attribute>
  17         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="affiliation">
  18                 <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
  19         </Attribute>
  20
  21         <Attribute name="urn:mace:dir:attribute-def:eduPersonAffiliation" id="unscoped-affiliation">
  22                 <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
  23         </Attribute>
  24         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" id="unscoped-affiliation">
  25                 <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
  26         </Attribute>
  27
  28         <Attribute name="urn:mace:dir:attribute-def:eduPersonEntitlement" id="entitlement"/>
  29         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="entitlement"/>
  30
  31         <!-- A persistent id attribute that supports personalized anonymous access. -->
  32
  33         <!-- First, the deprecated version: -->
  34         <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="targeted-id">
  35                 <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
  36         </Attribute>
  37
  38         <!-- Second, the new version (note the OID-style name): -->
  39         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="persistent-id">
  40                 <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$Name!!$NameQualifier!!$SPNameQualifier"/>
  41         </Attribute>
  42
  43         <!-- Third, the SAML 2.0 NameID Format: -->
  44         <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
  45                 <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$Name!!$NameQualifier!!$SPNameQualifier"/>
  46         </Attribute>
  47
  48         <!-- Some more eduPerson attributes, uncomment these to use them... -->
  49         <!--
  50         <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" id="primary-affiliation">
  51                 <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
  52         </Attribute>
  53         <Attribute name="urn:mace:dir:attribute-def:eduPersonNickname" id="nickname"/>
  54         <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN" id="primary-orgunit-dn"/>
  55         <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" id="orgunit-dn"/>
  56         <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgDN" id="org-dn"/>
  57
  58         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" id="primary-affiliation">
  59                 <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
  60         </Attribute>
  61         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.2" id="nickname"/>
  62         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.8" id="primary-orgunit-dn"/>
  63         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.4" id="orgunit-dn"/>
  64         <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.3" id="org-dn"/>
  65         -->
  66
  67         <!--Examples of LDAP-based attributes, uncomment to use these... -->
  68         <!--
  69         <Attribute name="urn:mace:dir:attribute-def:cn" id="cn"/>
  70         <Attribute name="urn:mace:dir:attribute-def:sn" id="sn"/>
  71         <Attribute name="urn:mace:dir:attribute-def:givenName" id="givenName"/>
  72         <Attribute name="urn:mace:dir:attribute-def:mail" id="mail"/>
  73         <Attribute name="urn:mace:dir:attribute-def:telephoneNumber" id="telephoneNumber"/>
  74         <Attribute name="urn:mace:dir:attribute-def:title" id="title"/>
  75         <Attribute name="urn:mace:dir:attribute-def:initials" id="initials"/>
  76         <Attribute name="urn:mace:dir:attribute-def:description" id="description"/>
  77         <Attribute name="urn:mace:dir:attribute-def:carLicense" id="carLicense"/>
  78         <Attribute name="urn:mace:dir:attribute-def:departmentNumber" id="departmentNumber"/>
  79         <Attribute name="urn:mace:dir:attribute-def:displayName" id="displayName"/>
  80         <Attribute name="urn:mace:dir:attribute-def:employeeNumber" id="employeeNumber"/>
  81         <Attribute name="urn:mace:dir:attribute-def:employeeType" id="employeeType"/>
  82         <Attribute name="urn:mace:dir:attribute-def:preferredLanguage" id="preferredLanguage"/>
  83         <Attribute name="urn:mace:dir:attribute-def:manager" id="manager"/>
  84         <Attribute name="urn:mace:dir:attribute-def:seeAlso" id="seeAlso"/>
  85         <Attribute name="urn:mace:dir:attribute-def:facsimileTelephoneNumber" id="facsimileTelephoneNumber"/>
  86         <Attribute name="urn:mace:dir:attribute-def:street" id="street"/>
  87         <Attribute name="urn:mace:dir:attribute-def:postOfficeBox" id="postOfficeBox"/>
  88         <Attribute name="urn:mace:dir:attribute-def:postalCode" id="postalCode"/>
  89         <Attribute name="urn:mace:dir:attribute-def:st" id="st"/>
  90         <Attribute name="urn:mace:dir:attribute-def:l" id="l"/>
  91         <Attribute name="urn:mace:dir:attribute-def:ou" id="ou"/>
  92         <Attribute name="urn:mace:dir:attribute-def:businessCategory" id="businessCategory"/>
  93         <Attribute name="urn:mace:dir:attribute-def:physicalDeliveryOfficeName" id="physicalDeliveryOfficeName"/>
  94
  95         <Attribute name="urn:oid:2.5.4.3" id="cn"/>
  96         <Attribute name="urn:oid:2.5.4.4" id="sn"/>
  97         <Attribute name="urn:oid:2.5.4.42" id="givenName"/>
  98         <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="mail"/>
  99         <Attribute name="urn:oid:2.5.4.20" id="telephoneNumber"/>
 100         <Attribute name="urn:oid:2.5.4.12" id="title"/>
 101         <Attribute name="urn:oid:2.5.4.43" id="initials"/>
 102         <Attribute name="urn:oid:2.5.4.13" id="description"/>
 103         <Attribute name="urn:oid:2.16.840.1.113730.3.1.1" id="carLicense"/>
 104         <Attribute name="urn:oid:2.16.840.1.113730.3.1.2" id="departmentNumber"/>
 105         <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>
 106         <Attribute name="urn:oid:1.2.840.113556.1.2.610" id="employeeNumber"/>
 107         <Attribute name="urn:oid:1.2.840.113556.1.2.613" id="employeeType"/>
 108         <Attribute name="urn:oid:2.16.840.1.113730.3.1.39" id="preferredLanguage"/>
 109         <Attribute name="urn:oid:0.9.2342.19200300.100.1.10" id="manager"/>
 110         <Attribute name="urn:oid:2.5.4.34" id="seeAlso"/>
 111         <Attribute name="urn:oid:2.5.4.23" id="facsimileTelephoneNumber"/>
 112         <Attribute name="urn:oid:2.5.4.9" id="street"/>
 113         <Attribute name="urn:oid:2.5.4.18" id="postOfficeBox"/>
 114         <Attribute name="urn:oid:2.5.4.17" id="postalCode"/>
 115         <Attribute name="urn:oid:2.5.4.8" id="st"/>
 116         <Attribute name="urn:oid:2.5.4.7" id="l"/>
 117         <Attribute name="urn:oid:2.5.4.11" id="ou"/>
 118         <Attribute name="urn:oid:2.5.4.15" id="businessCategory"/>
 119         <Attribute name="urn:oid:2.5.4.19" id="physicalDeliveryOfficeName"/>
 120         -->
 121
 122 </Attributes>