• SakaiVre
• ExampleAssertions

Example Shibboleth Assertion

This is a sample Shibboleth attribute assertion, as shown by https://wayf.internet2.edu/InQueue/sample.jsp

    <Response xmlns="urn:oasis:names:tc:SAML:1.0:protocol" 
            InResponseTo="_b384a8abbd3d3ed181e101bbc3793349" 
            IssueInstant="2006-07-10T15:31:28.703Z" 
            MajorVersion="1" MinorVersion="1" 
            ResponseID="_f5c87ac32188685cc77b0b11f6a5845a" 
              xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" 
              xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" 
              xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
        <Status>
            <StatusCode Value="samlp:Success"/>
        </Status>
        <Assertion xmlns="urn:oasis:names:tc:SAML:1.0:assertion" 
                AssertionID="_1debf317fe68896554ed04835f1713d4" 
                IssueInstant="2006-07-10T15:31:28.703Z" 
                Issuer="urn:mace:inqueue:oucs.ox.ac.uk" 
                MajorVersion="1" MinorVersion="1">
            <Conditions NotBefore="2006-07-10T15:31:28.703Z" NotOnOrAfter="2006-07-10T16:01:28.703Z">
                <AudienceRestrictionCondition>
                    <Audience>urn:mace:inqueue:example.edu</Audience>
                    <Audience>urn:mace:inqueue</Audience>
                </AudienceRestrictionCondition>
            </Conditions>
            <AttributeStatement>
                <Subject>
                    <NameIdentifier Format="urn:mace:shibboleth:1.0:nameIdentifier" 
                                    NameQualifier="urn:mace:inqueue:oucs.ox.ac.uk">
                           _d01a5026606809257837bc35ca0bef12
                    </NameIdentifier>
                </Subject>
                <Attribute AttributeName="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue Scope="oucs.ox.ac.uk">oucs</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:oucsUsername" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>syeates</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:sn" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>Yeates</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:preferredMail" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>stuart.yeates@oucs.ox.ac.uk</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:displayName" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>Stuart Yeates</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:oucsStatus" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>staff</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:initials" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>SA</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:eduPersonAffiliation" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>oucs</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:givenName" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>Stuart</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>oucs</AttributeValue>
                </Attribute><Attribute AttributeName="urn:mace:dir:attribute-def:cn" 
                                       AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                     <AttributeValue>Stuart Andrew Yeates</AttributeValue>
                     <AttributeValue>Stuart A Yeates</AttributeValue>
                     <AttributeValue>Stuart Yeates</AttributeValue>
                </Attribute>
                <Attribute AttributeName="urn:mace:dir:attribute-def:oucsPrimaryUsername" 
                           AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
                    <AttributeValue>syeates</AttributeValue>
                </Attribute>
           </AttributeStatement>
       </Assertion>
   </Response>

1. References

---

-- StuartYeates 2006-07-10 15:58:34

The content of this wiki is licensed under the Creative Commons Attribution-ShareAlike 2.0 England & Wales Licence.

OSS Watch is funded by the Joint Information Systems Committee (JISC) and is situated within the Research Technologies Service (RTS) of the University of Oxford.