1 <?xml version="1.0" encoding="UTF-8"?>
4 This file is an EXAMPLE configuration file. While the configuration presented in this
5 example file is functional, it isn't very interesting. However, there are lots of example
6 attributes, encoders, and a couple example data connectors.
8 Not all attribute definitions, data connectors, or principal connectors are demonstrated.
9 Deployers should refer to the Shibboleth 2 documentation for a complete list of components
14 <AttributeResolver xmlns="urn:mace:shibboleth:2.0:resolver" xmlns:resolver="urn:mace:shibboleth:2.0:resolver"
15 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:pc="urn:mace:shibboleth:2.0:resolver:pc"
16 xmlns:ad="urn:mace:shibboleth:2.0:resolver:ad" xmlns:dc="urn:mace:shibboleth:2.0:resolver:dc"
17 xmlns:enc="urn:mace:shibboleth:2.0:attribute:encoder" xmlns:sec="urn:mace:shibboleth:2.0:security"
18 xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver classpath:/schema/shibboleth-2.0-attribute-resolver.xsd
19 urn:mace:shibboleth:2.0:resolver:pc classpath:/schema/shibboleth-2.0-attribute-resolver-pc.xsd
20 urn:mace:shibboleth:2.0:resolver:ad classpath:/schema/shibboleth-2.0-attribute-resolver-ad.xsd
21 urn:mace:shibboleth:2.0:resolver:dc classpath:/schema/shibboleth-2.0-attribute-resolver-dc.xsd
22 urn:mace:shibboleth:2.0:attribute:encoder classpath:/schema/shibboleth-2.0-attribute-encoder.xsd
23 urn:mace:shibboleth:2.0:security classpath:/schema/shibboleth-2.0-security.xsd">
25 <!-- ========================================== -->
26 <!-- Attribute Definitions -->
27 <!-- ========================================== -->
29 <!-- Schema: Core schema attributes-->
31 <resolver:AttributeDefinition id="uid" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
32 sourceAttributeID="uid">
33 <resolver:Dependency ref="myLDAP" />
35 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
36 name="urn:mace:dir:attribute-def:uid" />
38 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
39 name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
40 </resolver:AttributeDefinition>
42 <resolver:AttributeDefinition id="email" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
43 sourceAttributeID="mail">
44 <resolver:Dependency ref="myLDAP" />
46 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
47 name="urn:mace:dir:attribute-def:mail" />
49 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
50 name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" />
51 </resolver:AttributeDefinition>
53 <resolver:AttributeDefinition id="homePhone" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
54 sourceAttributeID="homePhone">
55 <resolver:Dependency ref="myLDAP" />
57 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
58 name="urn:mace:dir:attribute-def:homePhone" />
60 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
61 name="urn:oid:0.9.2342.19200300.100.1.20" friendlyName="homePhone" />
62 </resolver:AttributeDefinition>
64 <resolver:AttributeDefinition id="homePostalAddress" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
65 sourceAttributeID="homePostalAddress">
66 <resolver:Dependency ref="myLDAP" />
68 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
69 name="urn:mace:dir:attribute-def:homePostalAddress" />
71 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
72 name="urn:oid:0.9.2342.19200300.100.1.39" friendlyName="homePostalAddress" />
73 </resolver:AttributeDefinition>
75 <resolver:AttributeDefinition id="mobileNumber" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
76 sourceAttributeID="mobile">
77 <resolver:Dependency ref="myLDAP" />
79 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
80 name="urn:mace:dir:attribute-def:mobile" />
82 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
83 name="urn:oid:0.9.2342.19200300.100.1.41" friendlyName="mobile" />
84 </resolver:AttributeDefinition>
86 <resolver:AttributeDefinition id="pagerNumber" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
87 sourceAttributeID="pager">
88 <resolver:Dependency ref="myLDAP" />
90 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
91 name="urn:mace:dir:attribute-def:pager" />
93 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
94 name="urn:oid:0.9.2342.19200300.100.1.42" friendlyName="pager" />
95 </resolver:AttributeDefinition>
97 <resolver:AttributeDefinition id="commonName" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
98 sourceAttributeID="cn">
99 <resolver:Dependency ref="myLDAP" />
101 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
102 name="urn:mace:dir:attribute-def:cn" />
104 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
105 name="urn:oid:2.5.4.3" friendlyName="cn" />
106 </resolver:AttributeDefinition>
108 <resolver:AttributeDefinition id="surname" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
109 sourceAttributeID="sn">
110 <resolver:Dependency ref="myLDAP" />
112 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
113 name="urn:mace:dir:attribute-def:sn" />
115 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
116 name="urn:oid:2.5.4.4" friendlyName="sn" />
117 </resolver:AttributeDefinition>
119 <resolver:AttributeDefinition id="locality" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
120 sourceAttributeID="l">
121 <resolver:Dependency ref="myLDAP" />
123 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
124 name="urn:mace:dir:attribute-def:l" />
126 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
127 name="urn:oid:2.5.4.7" friendlyName="l" />
128 </resolver:AttributeDefinition>
130 <resolver:AttributeDefinition id="stateProvince" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
131 sourceAttributeID="st">
132 <resolver:Dependency ref="myLDAP" />
134 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
135 name="urn:mace:dir:attribute-def:st" />
137 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
138 name="urn:oid:2.5.4.8" friendlyName="st" />
139 </resolver:AttributeDefinition>
141 <resolver:AttributeDefinition id="street" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
142 sourceAttributeID="street">
143 <resolver:Dependency ref="myLDAP" />
145 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
146 name="urn:mace:dir:attribute-def:street" />
148 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
149 name="urn:oid:2.5.4.9" friendlyName="street" />
150 </resolver:AttributeDefinition>
152 <resolver:AttributeDefinition id="organizationName" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
153 sourceAttributeID="o">
154 <resolver:Dependency ref="myLDAP" />
156 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
157 name="urn:mace:dir:attribute-def:o" />
159 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
160 name="urn:oid:2.5.4.10" friendlyName="o" />
161 </resolver:AttributeDefinition>
163 <resolver:AttributeDefinition id="organizationalUnit" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
164 sourceAttributeID="ou">
165 <resolver:Dependency ref="myLDAP" />
167 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
168 name="urn:mace:dir:attribute-def:ou" />
170 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
171 name="urn:oid:2.5.4.11" friendlyName="ou" />
172 </resolver:AttributeDefinition>
174 <resolver:AttributeDefinition id="title" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
175 sourceAttributeID="title">
176 <resolver:Dependency ref="myLDAP" />
178 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
179 name="urn:mace:dir:attribute-def:title" />
181 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
182 name="urn:oid:2.5.4.12" friendlyName="title" />
183 </resolver:AttributeDefinition>
185 <resolver:AttributeDefinition id="postalAddress" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
186 sourceAttributeID="postalAddress">
187 <resolver:Dependency ref="myLDAP" />
189 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
190 name="urn:mace:dir:attribute-def:postalAddress" />
192 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
193 name="urn:oid:2.5.4.16" friendlyName="postalAddress" />
194 </resolver:AttributeDefinition>
196 <resolver:AttributeDefinition id="postalCode" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
197 sourceAttributeID="postalCode">
198 <resolver:Dependency ref="myLDAP" />
200 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
201 name="urn:mace:dir:attribute-def:postalCode" />
203 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
204 name="urn:oid:2.5.4.17" friendlyName="postalCode" />
205 </resolver:AttributeDefinition>
207 <resolver:AttributeDefinition id="postOfficeBox" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
208 sourceAttributeID="postOfficeBox">
209 <resolver:Dependency ref="myLDAP" />
211 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
212 name="urn:mace:dir:attribute-def:postOfficeBox" />
214 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
215 name="urn:oid:2.5.4.18" friendlyName="postOfficeBox" />
216 </resolver:AttributeDefinition>
218 <resolver:AttributeDefinition id="telephoneNumber" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
219 sourceAttributeID="telephoneNumber">
220 <resolver:Dependency ref="myLDAP" />
222 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
223 name="urn:mace:dir:attribute-def:telephoneNumber" />
225 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
226 name="urn:oid:2.5.4.20" friendlyName="telephoneNumber" />
227 </resolver:AttributeDefinition>
229 <resolver:AttributeDefinition id="givenName" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
230 sourceAttributeID="givenName">
231 <resolver:Dependency ref="myLDAP" />
233 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
234 name="urn:mace:dir:attribute-def:givenName" />
236 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
237 name="urn:oid:2.5.4.42" friendlyName="givenName" />
238 </resolver:AttributeDefinition>
240 <resolver:AttributeDefinition id="initials" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
241 sourceAttributeID="initials">
242 <resolver:Dependency ref="myLDAP" />
244 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
245 name="urn:mace:dir:attribute-def:initials" />
247 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
248 name="urn:oid:2.5.4.43" friendlyName="initials" />
249 </resolver:AttributeDefinition>
252 <!-- Schema: inetOrgPerson attributes-->
254 <resolver:AttributeDefinition id="departmentNumber" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
255 sourceAttributeID="departmentNumber">
256 <resolver:Dependency ref="myLDAP" />
258 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
259 name="urn:mace:dir:attribute-def:departmentNumber" />
261 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
262 name="urn:oid:2.16.840.1.113730.3.1.2" friendlyName="departmentNumber" />
263 </resolver:AttributeDefinition>
265 <resolver:AttributeDefinition id="employeeNumber" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
266 sourceAttributeID="employeeNumber">
267 <resolver:Dependency ref="myLDAP" />
269 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
270 name="urn:mace:dir:attribute-def:employeeNumber" />
272 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
273 name="urn:oid:2.16.840.1.113730.3.1.3" friendlyName="employeeNumber" />
274 </resolver:AttributeDefinition>
276 <resolver:AttributeDefinition id="employeeType" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
277 sourceAttributeID="employeeType">
278 <resolver:Dependency ref="myLDAP" />
280 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
281 name="urn:mace:dir:attribute-def:employeeType" />
283 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
284 name="urn:oid:2.16.840.1.113730.3.1.4" friendlyName="employeeType" />
285 </resolver:AttributeDefinition>
287 <resolver:AttributeDefinition id="jpegPhoto" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
288 sourceAttributeID="jpegPhoto">
289 <resolver:Dependency ref="myLDAP" />
291 <resolver:AttributeEncoder xsi:type="SAML1Base64" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
292 name="urn:mace:dir:attribute-def:jpegPhoto" />
294 <resolver:AttributeEncoder xsi:type="SAML2Base64" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
295 name="urn:oid:0.9.2342.19200300.100.1.60" friendlyName="jpegPhoto" />
296 </resolver:AttributeDefinition>
298 <resolver:AttributeDefinition id="preferredLanguage" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
299 sourceAttributeID="preferredLanguage">
300 <resolver:Dependency ref="myLDAP" />
302 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
303 name="urn:mace:dir:attribute-def:preferredLanguage" />
305 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
306 name="urn:oid:2.16.840.1.113730.3.1.39" friendlyName="preferredLanguage" />
307 </resolver:AttributeDefinition>
310 <!-- Schema: eduPerson attributes -->
312 <resolver:AttributeDefinition id="eduPersonAffiliation" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
313 sourceAttributeID="eduPersonAffiliation">
314 <resolver:Dependency ref="staticAttributes" />
315 <resolver:Dependency ref="myLDAP" />
317 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
318 name="urn:mace:dir:attribute-def:eduPersonAffiliation" />
320 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
321 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" friendlyName="eduPersonAffiliation" />
322 </resolver:AttributeDefinition>
324 <resolver:AttributeDefinition id="eduPersonEntitlement" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
325 sourceAttributeID="eduPersonEntitlement">
326 <resolver:Dependency ref="myLDAP" />
328 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
329 name="urn:mace:dir:attribute-def:eduPersonEntitlement" />
331 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
332 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" friendlyName="eduPersonEntitlement" />
333 </resolver:AttributeDefinition>
335 <resolver:AttributeDefinition id="eduPersonNickname" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
336 sourceAttributeID="eduPersonNickname">
337 <resolver:Dependency ref="myLDAP" />
339 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
340 name="urn:mace:dir:attribute-def:eduPersonNickname" />
342 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
343 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.2" friendlyName="eduPersonNickname" />
344 </resolver:AttributeDefinition>
346 <resolver:AttributeDefinition id="eduPersonOrgDN" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
347 sourceAttributeID="eduPersonOrgDN">
348 <resolver:Dependency ref="myLDAP" />
350 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
351 name="urn:mace:dir:attribute-def:eduPersonOrgDN" />
353 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
354 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.3" friendlyName="eduPersonOrgDN" />
355 </resolver:AttributeDefinition>
357 <resolver:AttributeDefinition id="eduPersonOrgUnitDN" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
358 sourceAttributeID="eduPersonOrgUnitDN">
359 <resolver:Dependency ref="myLDAP" />
361 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
362 name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" />
364 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
365 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.4" friendlyName="eduPersonOrgUnitDN" />
366 </resolver:AttributeDefinition>
368 <resolver:AttributeDefinition id="eduPersonPrimaryAffiliation" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
369 sourceAttributeID="eduPersonPrimaryAffiliation">
370 <resolver:Dependency ref="myLDAP" />
372 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
373 name="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" />
375 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
376 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" friendlyName="eduPersonPrimaryAffiliation" />
377 </resolver:AttributeDefinition>
379 <resolver:AttributeDefinition id="eduPersonPrimaryOrgUnitDN" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
380 sourceAttributeID="eduPersonPrimaryOrgUnitDN">
381 <resolver:Dependency ref="myLDAP" />
383 <resolver:AttributeEncoder xsi:type="SAML1String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
384 name="urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN" />
386 <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
387 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.8" friendlyName="eduPersonPrimaryOrgUnitDN" />
388 </resolver:AttributeDefinition>
390 <resolver:AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
391 scope="example.org" sourceAttributeID="uid">
392 <resolver:Dependency ref="myLDAP" />
394 <resolver:AttributeEncoder xsi:type="SAML1ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
395 name="urn:mace:dir:attribute-def:eduPersonPrincipalName" />
397 <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
398 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" friendlyName="eduPersonPrincipalName" />
399 </resolver:AttributeDefinition>
401 <resolver:AttributeDefinition id="eduPersonScopedAffiliation" xsi:type="Scoped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
402 scope="example.org" sourceAttributeID="eduPersonAffiliation">
403 <resolver:Dependency ref="myLDAP" />
405 <resolver:AttributeEncoder xsi:type="SAML1ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
406 name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" />
408 <resolver:AttributeEncoder xsi:type="SAML2ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
409 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" friendlyName="eduPersonScopedAffiliation" />
410 </resolver:AttributeDefinition>
412 <resolver:AttributeDefinition id="eduPersonTargetedID.old" xsi:type="Scoped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
413 scope="iay.org.uk" sourceAttributeID="computedID">
414 <resolver:Dependency ref="computedID" />
416 <resolver:AttributeEncoder xsi:type="SAML1ScopedString" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
417 name="urn:mace:dir:attribute-def:eduPersonTargetedID" />
418 </resolver:AttributeDefinition>
420 <resolver:AttributeDefinition id="eduPersonTargetedID" xsi:type="SAML2NameID" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
421 nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
422 sourceAttributeID="computedID">
423 <resolver:Dependency ref="computedID" />
425 <resolver:AttributeEncoder xsi:type="SAML1XMLObject" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
426 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" />
428 <resolver:AttributeEncoder xsi:type="SAML2XMLObject" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
429 name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" friendlyName="eduPersonTargetedID" />
430 </resolver:AttributeDefinition>
433 <!-- Name Identifier related attributes -->
434 <resolver:AttributeDefinition id="transientId" xsi:type="TransientId" xmlns="urn:mace:shibboleth:2.0:resolver:ad">
435 <resolver:AttributeEncoder xsi:type="SAML1StringNameIdentifier"
436 xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:mace:shibboleth:1.0:nameIdentifier" />
438 <resolver:AttributeEncoder xsi:type="SAML1StringNameIdentifier"
439 xmlns="urn:mace:shibboleth:2.0:attribute:encoder" nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
441 <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
442 nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
444 <resolver:AttributeEncoder xsi:type="SAML2StringNameID" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
445 nameFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" />
446 </resolver:AttributeDefinition>
448 <!-- ========================================== -->
449 <!-- Data Connectors -->
450 <!-- ========================================== -->
452 <!-- Example Static Connector -->
454 <resolver:DataConnector id="staticAttributes" xsi:type="Static" xmlns="urn:mace:shibboleth:2.0:resolver:dc">
455 <Attribute id="eduPersonAffiliation">
456 <Value>member</Value>
458 <Attribute id="eduPersonEntitlement">
459 <Value>urn:example.org:entitlement:entitlement1</Value>
460 <Value>urn:mace:dir:entitlement:common-lib-terms</Value>
462 </resolver:DataConnector>
465 <!-- Example Relational Database Connector -->
467 <resolver:DataConnector id="mySIS" xsi:type="RelationalDatabase" xmlns="urn:mace:shibboleth:2.0:resolver:dc">
468 <ApplicationManagedConnection jdbcDriver="oracle.jdbc.driver.OracleDriver"
469 jdbcURL="jdbc:oracle:thin:@db.example.org:1521:SomeDB" jdbcUserName="myid" jdbcPassword="mypassword" />
472 SELECT * FROM student WHERE gzbtpid = $requestContext.principalName
476 <Column columnName="gzbtpid" attributeID="uid" />
477 <Column columnName="fqlft" attributeID="gpa" type="Float" />
478 </resolver:DataConnector>
481 <!-- Example LDAP Connector -->
483 <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory" xmlns="urn:mace:shibboleth:2.0:resolver:dc"
484 ldapURL="ldap://ldap.example.org" baseDN="ou=people,dc=example,dc=org" principal="uid=myservice,ou=system"
485 principalCredential="myServicePassword">
488 (uid=$requestContext.principalName)
491 </resolver:DataConnector>
494 <!-- Computed targeted ID connector -->
496 <resolver:DataConnector xsi:type="ComputedId" xmlns="urn:mace:shibboleth:2.0:resolver:dc"
498 generatedAttributeID="computedID"
499 sourceAttributeID="uid"
500 salt="your random string here">
501 <resolver:Dependency ref="myLDAP" />
502 </resolver:DataConnector>
505 <!-- ========================================== -->
506 <!-- Principal Connectors -->
507 <!-- ========================================== -->
508 <resolver:PrincipalConnector xsi:type="Transient" xmlns="urn:mace:shibboleth:2.0:resolver:pc" id="shibTransient"
509 nameIDFormat="urn:mace:shibboleth:1.0:nameIdentifier" />
511 <resolver:PrincipalConnector xsi:type="Transient" xmlns="urn:mace:shibboleth:2.0:resolver:pc" id="saml1Unspec"
512 nameIDFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
514 <resolver:PrincipalConnector xsi:type="Transient" xmlns="urn:mace:shibboleth:2.0:resolver:pc" id="saml2Transient"
515 nameIDFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:transient" />