Top |
Figure 83. Schema fragment for samlp2:NameIDPolicy
<complexType name="NameIDPolicyType"> <attribute name="Format" type="anyURI" use="optional"/> <attribute name="SPNameQualifier" type="string" use="optional"/> <attribute name="AllowCreate" type="boolean" use="optional"/> </complexType>
LassoNode *
lasso_samlp2_name_id_policy_new (void
);
Creates a new LassoSamlp2NameIDPolicy object.
struct LassoSamlp2NameIDPolicy { LassoNode parent; /* attributes */ char *Format; char *SPNameQualifier; gboolean AllowCreate; };
NameIDPolicy element is part of AuthnRequest and allows to give hint to the identity provider about the NameID the service provider desire to receive.
LassoNode |
||
the name-identifier format, see LASSO_SAML2_NAME_IDENTIFIER_FORMAT_EMAIL, LASSO_SAML2_NAME_IDENTIFIER_FORMAT_X509, LASSO_SAML2_NAME_IDENTIFIER_FORMAT_WINDOWS, LASSO_SAML2_NAME_IDENTIFIER_FORMAT_KERBEROS, LASSO_SAML2_NAME_IDENTIFIER_FORMAT_ENTITY, LASSO_SAML2_NAME_IDENTIFIER_FORMAT_PERSISTENT, LASSO_SAML2_NAME_IDENTIFIER_FORMAT_TRANSIENT or LASSO_SAML2_NAME_IDENTIFIER_FORMAT_ENCRYPTED. |
||
other providerID to use as SPNameQualifier in the returned assertion. By default an IdP create a NameID for the requesting entity, this field allows to obtain a NameID qualified for a third party. |
||
authorize the identity provider to create a new federation, otherwise it must report a failure in case no existing federation is found (status code of LASSO_LIB_STATUS_CODE_FEDERATION_DOES_NOT_EXIST and error code of LASSO_PROFILE_ERROR_FEDERATION_NOT_FOUND). |