The configured attribute-copying rules are listed in the table. To add a
new rule, click the Add button.
The Copy/Modify Attributes screen can be used to copy a
message or user attribute to a different message or user attribute. The
From Attribute represents the source attribute, while the
To Attribute represents the destination attribute.
The attribute value can be copied from 3 possible sources:
-
Message:
Select this option to copy the value of a message attribute. The
name of the source attribute should be specified in the
Name field.
-
User:
This option should be selected if a user attribute stored in the
attribute.lookup.list is to be copied. Enter
the name (and namespace if the attribute was extracted from a SAML
attribute assertion) of the user attribute in the
Name and Namespace fields.
If there are multiple values stored in the
attribute.lookup.list for the attribute
entered in the Name field, only the first value
will be copied.
-
User Entered Value:
Select this option to copy a user-specified value to an attribute.
Enter the new attribute value in the attribute
field. You can enter a property to represent the value of a message
attribute instead of entering a specific value directly. The syntax
for entering properties is as follows:
${authentication.subject.id}
In this case the value of the
authentication.subject.id attribute is copied
to the named attribute.
The message can be copied to either of 2 types of attributes:
-
Message:
The attribute can be copied to any message attribute. The name of
the attribute should be specified in the Name
field.
-
User:
Select this option if the attribute or value should be copied to a
user attribute stored in the
attribute.lookup.list . Specify the name and
namespace (if necessary) of this attribute in the
Name and Namespace fields.
If there are multiple values stored in the
attribute.lookup.list for the attribute
entered in the Name field of the
From attribute section, the attribute value will
be copied to the first occurrence of the attribute name in list.
Check the Create list attribute checkbox if the new
attribute can contain several items, i.e. it is a list.
|