71 lines
3.7 KiB
XML
71 lines
3.7 KiB
XML
<Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
|
|
|
<!--
|
|
The mappings are a mix of SAML 1.1 and SAML 2.0 attribute names agreed to within the Shibboleth
|
|
community. The non-OID URNs are SAML 1.1 names and most of the OIDs are SAML 2.0 names, with a
|
|
few exceptions for newer attributes where the name is the same for both versions. You will
|
|
usually want to uncomment or map the names for both SAML versions as a unit.
|
|
-->
|
|
|
|
<Attribute id="openstack_project" name="openstack_project"/>
|
|
<Attribute id="openstack_project_domain" name="openstack_project_domain"/>
|
|
<Attribute id="openstack_roles" name="openstack_roles"/>
|
|
<Attribute id="openstack_user" name="openstack_user"/>
|
|
<Attribute id="openstack_user_domain" name="openstack_user_domain"/>
|
|
<Attribute id="openstack_groups" name="openstack_groups"/>
|
|
|
|
<!-- First some useful eduPerson attributes that many sites might use. -->
|
|
<Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName" id="eppn">
|
|
<AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
|
|
</Attribute>
|
|
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn">
|
|
<AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
|
|
</Attribute>
|
|
|
|
<Attribute name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" id="affiliation">
|
|
<AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
|
|
</Attribute>
|
|
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" id="affiliation">
|
|
<AttributeDecoder xsi:type="ScopedAttributeDecoder" caseSensitive="false"/>
|
|
</Attribute>
|
|
|
|
<Attribute name="urn:mace:dir:attribute-def:eduPersonAffiliation" id="unscoped-affiliation">
|
|
<AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
|
|
</Attribute>
|
|
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" id="unscoped-affiliation">
|
|
<AttributeDecoder xsi:type="StringAttributeDecoder" caseSensitive="false"/>
|
|
</Attribute>
|
|
|
|
<Attribute name="urn:mace:dir:attribute-def:eduPersonEntitlement" id="entitlement"/>
|
|
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="entitlement"/>
|
|
|
|
<!-- A persistent id attribute that supports personalized anonymous access. -->
|
|
|
|
<!-- First, the deprecated/incorrect version, decoded as a scoped string: -->
|
|
<Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="targeted-id">
|
|
<AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
|
|
<!-- <AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/> -->
|
|
</Attribute>
|
|
|
|
<!-- Second, an alternate decoder that will decode the incorrect form into the newer form. -->
|
|
<!--
|
|
<Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="persistent-id">
|
|
<AttributeDecoder xsi:type="NameIDFromScopedAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
|
|
</Attribute>
|
|
-->
|
|
|
|
<!-- Third, the new version (note the OID-style name): -->
|
|
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="persistent-id">
|
|
<AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
|
|
</Attribute>
|
|
|
|
<!-- Fourth, the SAML 2.0 NameID Format: -->
|
|
<Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
|
|
<AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
|
|
</Attribute>
|
|
|
|
<!-- UID attribute used by samltest.id -->
|
|
<Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="uid" />
|
|
|
|
</Attributes>
|