Page History

AAP Configuration and Attribute Usage

This page will guide you in the process of configuring AAP.xml

General Information about AAP and attributes.

It is very important that you start out with a clean AAP. This ensures that you only get the attributes you need for your application. Just remember less is better. We recommend you downloading the AAP.xml file from the attachment tab. Before you place the new AAP.xml onto your server, backup your existing AAP.xml file in your Shibboleth root directory, so you can use it for reference if needed.

The list of available attributes in Shibboleth is found here. There you will find information of what each attribute is and what they do. They also contain the usage of these attributes in AAP.xml configuration

AAP.xml Syntax

An indepth look at AAP.xml configuration can be found at the Internet2 site. It will show you detailed look into AAP cofiguration.

AAP.xml is located if your root directory of your shibboleth install. Each element generally looks like the code below.

<AttributeRule Name="urn:mace:ucla.edu:edimi:attributes:uclaLogonID" CaseSensitive="false" Header="SHIB-UCLALOGNID" Alias="uclaLogonId">
  <AnySite>
      <AnyValue/>
  </AnySite>
</AttributeRule>

AttributeRule element

• "Name" - this is the Shibboleth attribute
• "Header" - The name of a HTTP request header to map the value of this attribute into.
• "Alias" - A short name for the attribute to be used as a reference for this rule by Apache Require directives.