Attribute Request Message Web Services Interface for Attribute Sharing

5-50 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation xmlns:orafed-arxs=http:www.oracle.comfedar10gR3 orafed-arxs:Subjectcn=alice,cn=users,dc=us,dc=oracle,dc=com orafed-arxs:Subject orafed-arxs:Attribute Name=mail orafed-arxs:Valuealiceoracle.comorafed-arxs:Value orafed-arxs:Valueboboracle.comorafed-arxs:Value orafed-arxs:Attribute orafed-arxs:Attribute Name=firstname orafed-arxs:ValueBobbyorafed-arxs:Value orafed-arxs:ValueCharlesorafed-arxs:Value orafed-arxs:Attribute orafed-arxs:Attribute Name=lastname orafed-arxs:Attribute orafed-arxs:AttributeRequest SOAP-ENV:Body SOAP-ENV:Envelope Example 2 In the following request, the target IdP is specified to be http:my-corp.comfedidp, so Oracle Identity Federation will send the AttributeQuery to this attribute authority. Also, the Subject Format is oracle:security:nameid:format:userid, so the Subject value alice is taken to be the User ID of the user of which attributes are requested. SOAP-ENV:Envelope xmlns:SOAP-ENV=http:schemas.xmlsoap.orgsoapenvelope SOAP-ENV:Body orafed-arxs:AttributeRequest xmlns:orafed-arxs=http:www.oracle.comfedar10gR3 TargetIDP=http:my-corp.comfedidp orafed-arxs:Subject Format=oracle:security:nameid:format:useridalice orafed-arxs:Subject orafed-arxs:Attribute Name=mail orafed-arxs:Valuealiceoracle.comorafed-arxs:Value orafed-arxs:Valueboboracle.comorafed-arxs:Value orafed-arxs:Attribute orafed-arxs:Attribute Name=firstname orafed-arxs:ValueBobbyorafed-arxs:Value orafed-arxs:ValueCharlesorafed-arxs:Value orafed-arxs:Attribute orafed-arxs:Attribute Name=lastname orafed-arxs:Attribute orafed-arxs:AttributeRequest SOAP-ENV:Body SOAP-ENV:Envelope The output rules are as follows: ■ Following the SAML AttributeQuery convention, if no attributes are named, all of the users attributes are returned. ■ If one or more attributes are named in the request, only these are returned. ■ If values are specified in the request, the attribute authority will only return a local attribute value if the value is present in the request. ■ Attributes are returned subject to the responders local policy. Configuring Oracle Identity Federation 5-51

5.8.3 Attribute Response Message

The Attribute Requester service returns the AttributeResponse message to a SOAP client following an attribute request. Outputs of AttributeResponse include: ■ the status of the SAML 1.x or SAML 2.0 query Success or Failure, with the reason. The client can use this information for logging. ■ the Subject, as specified in the Request ■ the Subject Format, as specified in the Request ■ zero or more Attribute elements, with each element supplying an attribute name and zero or more values Note the following about returned attribute values: ■ All values are UTF-8 strings. ■ Following the SAML AttributeQuery convention, if the requestor is not allowed to see any values for an attribute, the Attribute element will be returned with no Value elements. ■ An attribute value of NULL is represented by Value Null=true. ■ The CacheFor attribute in the AttributeResponse message specifies how long the attribute values can be cached. The AttributeResponse message is wrapped in a SOAP Envelope and Body and returned in an HTTP 200 OK response. The following attribute responses could correspond to the attribute requests in the examples above: Example 1 SOAP-ENV:Envelope xmlns:SOAP-ENV=http:schemas.xmlsoap.orgsoapenvelope SOAP-ENV:Body orafed-arxs:AttributeResponse xmlns:orafed-arxs=http:www.oracle.comfedar10gR3 CacheFor=1199 orafed-arxs:StatusSuccessorafed-arxs:Status orafed-arxs:Subjectcn=alice,cn=users,dc=us,dc=oracle,dc=com orafed-arxs:Subject orafed-arxs:Attribute Name=lastname orafed-arxs:ValueAppletonorafed-arxs:Value orafed-arxs:Attribute orafed-arxs:Attribute Name=firstnameorafed-arxs:Attribute orafed-arxs:Attribute Name=mail orafed-arxs:Valuealiceoracle.comorafed-arxs:Value orafed-arxs:Attribute orafed-arxs:AttributeResponse SOAP-ENV:Body SOAP-ENV:Envelope Example 2 SOAP-ENV:Envelope xmlns:SOAP-ENV=http:schemas.xmlsoap.orgsoapenvelope SOAP-ENV:Body orafed-arxs:AttributeResponse xmlns:orafed-arxs=http:www.oracle.comfedar10gR3 CacheFor=1199