Attribute Structure
Each SAML attribute released by RapidIdentity has the following structure as defined in the SAML 2.0 core specification.
| Field | Description |
|---|---|
Name | The identifier for the attribute. The value depends on the
NameFormat. |
NameFormat | URI that identifies how the attribute Name should be
interpreted. Valid values are:
|
FriendlyName | (Optional) A human-readable name for the attribute. |
AttributeValue | The value of the attribute, which can have one or more values. |
NameID Formats
The NameID identifies the authenticated user in the SAML Subject. RapidIdentity
supports the following NameID formats defined by SAML 2.0:
| Format | Description |
|---|---|
persistent | The privacy-preserving identifier that remains stable across sessions for a given user and service provider pair. |
transient | The identifier valid only for the duration of a single session. |
emailAddress | The user's email address, which is used when the service provider identifies users by email. |
unspecified | The NameID format is determined by agreement between the IdP and
service provider. |
Attribute Namespaces for InCommon
Service providers participating in the InCommon federation expect attributes in the
eduPerson schema. eduPerson attributes use URI-formatted names with corresponding
Object Identifier (OID) values.
| Attribute | OID |
|---|---|
eduPersonPrincipalName | urn:oid:1.3.6.1.4.1.5923.1.1.1.6 |
eduPersonScopedAffiliation | urn:oid:1.3.6.1.4.1.5923.1.1.1.9 |
eduPersonTargetedID | urn:oid:1.3.6.1.4.1.5923.1.1.1.10 |
eduPersonUniqueId | urn:oid:1.3.6.1.4.1.5923.1.1.1.13 |