Policy Server Guides › Policy Design Guide › WS-Federation Resource Partner Properties Reference › Resource Partner Properties Dialog--Attributes Tab › Resource Partner Attribute Dialog--Attribute Setup Tab

Resource Partner Attribute Dialog--Attribute Setup Tab

The Attribute Setup tab contains the following fields and controls:

Attribute

Specify the format for the attribute that will be part of a SAML assertion. Options are:

• EmailAddress
• UPN
• CommonName
• Group
• NameValue

Attribute Kind

The Attribute Kind group box contains radio buttons that allow you to specify the the type of attribute that will be added to the assertion:

Static

Indicates that the attribute kind is the value in the Variable Name field. Activates the Variable Value field; disables other controls in the dialog.

User Attribute

Indicates that the DN identifier is the value of Attribute Name field. Activates the Attribute Name field; disables other controls in the dialog.

DN Attribute

Indicates that the name identifier will be specified by an attribute associated with a DN. Activates the User Attribute field, the DN Spec field, and the Allow Nested Groups field, and disables the Static Value field.

Note: If you select the DN Attribute radio button, you may also select the Allow Nested Groups check box. Selecting this check box allows SiteMinder to return an attribute from a group that is nested in another group specified by a policy. Nested groups often occur in complex LDAP deployments.

Allow Nested Groups

Indicates that nested groups are allowed when selecting the DN. Enabled if the DN Attribute Radio Button is selected.

Note: If the attribute is configured to be encrypted, the Encryption Certificate settings in the Encryption tab will be enabled.

Attribute Fields

Complete the fields for the Attribute Kind that you selected. Different fields become available depending on the attribute type (static, user attribute, DN attribute).

Variable Name

Designates the name for the attribute that SiteMinder returns in the assertion. Complete this field for any attribute type.

Variable Value

(Static only) Defines the static text as the value for the name/value pair. Enter a value.

Attribute Name

(User and DN Attributes only) Specifies the user directory attribute SiteMinder uses for the name/value pair.

DN Spec

(DN Attribute only) Specifies the DN of the user or user group and the name of the user attribute in the Attribute Name field.

More Information:

Configure Attributes for WS-Federation Assertions (optional)