Copy/Modify Attributes

Contents

Overview

The Copy/Modify Attributes filter copies the values of message or user attributes to other message or user attributes. It is also possible to set the value of a message or user attribute to a user-specified value.

Configuration

The configured attribute-copying rules are listed in the table. To add a new rule, click the Add button.

The Copy/Modify Attributes screen can be used to copy a message or user attribute to a different message or user attribute. The From Attribute represents the source attribute, while the To Attribute represents the destination attribute.

The attribute value can be copied from 3 possible sources:

  • Message:
    Select this option to copy the value of a message attribute. The name of the source attribute should be specified in the Name field.
  • User:
    This option should be selected if a user attribute stored in the attribute.lookup.list is to be copied. Enter the name (and namespace if the attribute was extracted from a SAML attribute assertion) of the user attribute in the Name and Namespace fields.
    If there are multiple values stored in the attribute.lookup.list for the attribute entered in the Name field, only the first value will be copied.
  • User Entered Value:
    Select this option to copy a user-specified value to an attribute. Enter the new attribute value in the attribute field. You can enter a property to represent the value of a message attribute instead of entering a specific value directly. The syntax for entering properties is as follows:
    ${authentication.subject.id}
    In this case the value of the authentication.subject.id attribute is copied to the named attribute.

The message can be copied to either of 2 types of attributes:

  • Message:
    The attribute can be copied to any message attribute. The name of the attribute should be specified in the Name field.
  • User:
    Select this option if the attribute or value should be copied to a user attribute stored in the attribute.lookup.list. Specify the name and namespace (if necessary) of this attribute in the Name and Namespace fields.
    If there are multiple values stored in the attribute.lookup.list for the attribute entered in the Name field of the From attribute section, the attribute value will be copied to the first occurrence of the attribute name in list.

Check the Create list attribute checkbox if the new attribute can contain several items, i.e. it is a list.