e4ab30bb4220e9b60f1ee5ad90c2b4e4823a5be6
[shibboleth/sp.git] / configs / attribute-map.xml.in
1 <Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map"
2     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
3     xsi:schemaLocation="urn:mace:shibboleth:2.0:attribute-map @-PKGXMLDIR-@/shibboleth-2.0-attribute-map.xsd">
4
5     <!-- First some useful eduPerson attributes that many sites might use. -->
6     
7     <Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName" id="eppn">
8         <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
9     </Attribute>
10     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
11         <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
12     </Attribute>
13     
14     <Attribute name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" id="affiliation">
15         <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
16     </Attribute>
17     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="affiliation">
18         <AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
19     </Attribute>
20     
21     <Attribute name="urn:mace:dir:attribute-def:eduPersonAffiliation" id="unscoped-affiliation">
22         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
23     </Attribute>
24     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" id="unscoped-affiliation">
25         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
26     </Attribute>
27     
28     <Attribute name="urn:mace:dir:attribute-def:eduPersonEntitlement" id="entitlement"/>
29     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="entitlement"/>
30     
31     <!-- A persistent id attribute that supports personalized anonymous access. -->
32     
33     <!-- First, the deprecated version: -->
34     <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="targeted-id">
35         <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
36     </Attribute>
37
38     <!-- Second, the new version (note the OID-style name): -->
39     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="persistent-id">
40         <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name"/>
41     </Attribute>
42
43     <!-- Third, the SAML 2.0 NameID Format: -->
44     <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
45         <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name"/>
46     </Attribute>
47     
48     <!-- Some more eduPerson attributes, uncomment these to use them... -->
49     <!--
50     <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" id="primary-affiliation">
51         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
52     </Attribute>
53     <Attribute name="urn:mace:dir:attribute-def:eduPersonNickname" id="nickname"/>
54     <Attribute name="urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN" id="primary-orgunit-dn"/>
55     <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" id="orgunit-dn"/>
56     <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgDN" id="org-dn"/>
57
58     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" id="primary-affiliation">
59         <AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
60     </Attribute>
61     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.2" id="nickname"/>
62     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.8" id="primary-orgunit-dn"/>
63     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.4" id="orgunit-dn"/>
64     <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.3" id="org-dn"/>
65     -->
66
67     <!--Examples of LDAP-based attributes, uncomment to use these... -->
68     <!--
69     <Attribute name="urn:mace:dir:attribute-def:cn" id="cn"/>
70     <Attribute name="urn:mace:dir:attribute-def:sn" id="sn"/>
71     <Attribute name="urn:mace:dir:attribute-def:givenName" id="givenName"/>
72     <Attribute name="urn:mace:dir:attribute-def:mail" id="mail"/>
73     <Attribute name="urn:mace:dir:attribute-def:telephoneNumber" id="telephoneNumber"/>
74     <Attribute name="urn:mace:dir:attribute-def:title" id="title"/>
75     <Attribute name="urn:mace:dir:attribute-def:initials" id="initials"/>
76     <Attribute name="urn:mace:dir:attribute-def:description" id="description"/>
77     <Attribute name="urn:mace:dir:attribute-def:carLicense" id="carLicense"/>
78     <Attribute name="urn:mace:dir:attribute-def:departmentNumber" id="departmentNumber"/>
79     <Attribute name="urn:mace:dir:attribute-def:displayName" id="displayName"/>
80     <Attribute name="urn:mace:dir:attribute-def:employeeNumber" id="employeeNumber"/>
81     <Attribute name="urn:mace:dir:attribute-def:employeeType" id="employeeType"/>
82     <Attribute name="urn:mace:dir:attribute-def:preferredLanguage" id="preferredLanguage"/>
83     <Attribute name="urn:mace:dir:attribute-def:manager" id="manager"/>
84     <Attribute name="urn:mace:dir:attribute-def:seeAlso" id="seeAlso"/>
85     <Attribute name="urn:mace:dir:attribute-def:facsimileTelephoneNumber" id="facsimileTelephoneNumber"/>
86     <Attribute name="urn:mace:dir:attribute-def:street" id="street"/>
87     <Attribute name="urn:mace:dir:attribute-def:postOfficeBox" id="postOfficeBox"/>
88     <Attribute name="urn:mace:dir:attribute-def:postalCode" id="postalCode"/>
89     <Attribute name="urn:mace:dir:attribute-def:st" id="st"/>
90     <Attribute name="urn:mace:dir:attribute-def:l" id="l"/>
91     <Attribute name="urn:mace:dir:attribute-def:ou" id="ou"/>
92     <Attribute name="urn:mace:dir:attribute-def:businessCategory" id="businessCategory"/>
93     <Attribute name="urn:mace:dir:attribute-def:physicalDeliveryOfficeName" id="physicalDeliveryOfficeName"/>
94
95     <Attribute name="urn:oid:2.5.4.3" id="cn"/>
96     <Attribute name="urn:oid:2.5.4.4" id="sn"/>
97     <Attribute name="urn:oid:2.5.4.42" id="givenName"/>
98     <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="mail"/>
99     <Attribute name="urn:oid:2.5.4.20" id="telephoneNumber"/>
100     <Attribute name="urn:oid:2.5.4.12" id="title"/>
101     <Attribute name="urn:oid:2.5.4.43" id="initials"/>
102     <Attribute name="urn:oid:2.5.4.13" id="description"/>
103     <Attribute name="urn:oid:2.16.840.1.113730.3.1.1" id="carLicense"/>
104     <Attribute name="urn:oid:2.16.840.1.113730.3.1.2" id="departmentNumber"/>
105     <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>
106     <Attribute name="urn:oid:1.2.840.113556.1.2.610" id="employeeNumber"/>
107     <Attribute name="urn:oid:1.2.840.113556.1.2.613" id="employeeType"/>
108     <Attribute name="urn:oid:2.16.840.1.113730.3.1.39" id="preferredLanguage"/>
109     <Attribute name="urn:oid:0.9.2342.19200300.100.1.10" id="manager"/>
110     <Attribute name="urn:oid:2.5.4.34" id="seeAlso"/>
111     <Attribute name="urn:oid:2.5.4.23" id="facsimileTelephoneNumber"/>
112     <Attribute name="urn:oid:2.5.4.9" id="street"/>
113     <Attribute name="urn:oid:2.5.4.18" id="postOfficeBox"/>
114     <Attribute name="urn:oid:2.5.4.17" id="postalCode"/>
115     <Attribute name="urn:oid:2.5.4.8" id="st"/>
116     <Attribute name="urn:oid:2.5.4.7" id="l"/>
117     <Attribute name="urn:oid:2.5.4.11" id="ou"/>
118     <Attribute name="urn:oid:2.5.4.15" id="businessCategory"/>
119     <Attribute name="urn:oid:2.5.4.19" id="physicalDeliveryOfficeName"/>
120     -->
121
122 </Attributes>