[OpenSAML] Attribute : which namespace ?

2 views
Skip to first unread message

jeanbaptis...@ext.mpsa.com

unread,
Nov 27, 2009, 12:03:42 PM11/27/09
to mace-open...@internet2.edu

Hi all,

I'im developping a identity provider based on OpenSAML 2.2.1. I want to
generate SAML 1.1 assertion with attributes.
When building the assertion, and specially the Attribute element of an
AttributeStatement, I don't know what for namespace to set for the
attribute.
Apparently the AttributeNamespace property is required (according to the
SAML 1.1 XML Schema).
Is there a standard value that I can set for this property ?

Regards,

Jean-Baptiste RENEVIER

Scott Cantor

unread,
Nov 27, 2009, 2:18:15 PM11/27/09
to mace-open...@internet2.edu
jeanbaptis...@ext.mpsa.com wrote on 2009-11-27:
> I don't know what for namespace to set for the attribute. Apparently the
> AttributeNamespace property is required (according to the SAML 1.1 XML
> Schema). Is there a standard value that I can set for this property ?

It's a horrid little attribute that has no standardization. The Shibboleth
project standardized its defaults around a fixed constant that signifies the
Name is a URI and the Namespace is meaningless. Beyond that there are no
standard practices other than very ugly name-splitting hacks.

-- Scott


Reply all
Reply to author
Forward
0 new messages