This schema maps SAML attributes into Shibboleth internal attributes. A wrapper element for GSS-API contexts. A wrapper element for GSS-API composite names. The set of SAML or GSS-API attribute mappings. Rule for mapping a SAML attribute to an internal attribute. The internal attribute ID to which this SAML attribute maps. DEPRECATED: Aliases for the internal attribute to which this SAML attribute maps. The SAML 1 AttributeName or SAML 2 Name of the attribute. The SAML 1 Namespace or SAML 2 NameFormat of the attribute. Marks an attribute as requested by the service. Marks an attribute as required by the service. Rule for mapping a GSS-API naming attribute to an internal attribute. The internal attribute ID to which this SAML attribute maps. Optional aliases for the internal attribute to which this SAML attribute maps. The name of the naming attribute. If true, only an authenticated GSS-API naming attribute will be mapped. If true, the GSS-API naming attribute will be base64-encoded for internal use. The character(s) used to delimit the scoped information from the scope. Decodes a SAML attribute into its Shibboleth-internal representation. Flag controlling case sensitivity when comparisons to the attribute's values are done. Flag controlling whether the resulting attribute should be exported for CGI use. Flag controlling whether the decoder should select only the best matching value by language. Crypto-provider-specific name of hash algorithm to use, turning the decoded result into a simple string. Decoder for attributes with string values. Decoder for attributes with scoped values. The character(s) used to delimit the scoped information from the scope. Decoder for attributes with NameID values. The pattern used to generate string versions of the attribute's values. Flag controlling whether to default in values for NameQualifier/SPNameQualifier if not set. Decoder for attributes with scoped values that produces a NameID attribute with the scope dropped and the NameQualifiers defaulted. Value to use as the NameID Format. Flag controlling whether to default in values for NameQualifier/SPNameQualifier if not set. The pattern used to generate string versions of the attribute's values. Decoder for attributes with ds:KeyInfo values. Flag controlling whether to hash keys before base64-encoding them. Crypto-provider-specific name of hash algorithm to use. Decoder for directly serializing XML values. Decoder for extracting information from XML values. Optional transform to turn qualified XML names into string names. The pattern used to generate strings from the XML. Decoder for attributes with base64-encoded string values.