<Attributes xmlns="urn:mace:shibboleth:2.0:attribute-map"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:switchmd="http://www.switch.ch/aai/metadata/extensions"
    xsi:schemaLocation="urn:mace:shibboleth:2.0:attribute-map /opt/shibboleth-sp2/share/xml/shibboleth/shibboleth-2.0-attribute-map.xsd">

    <Extensions>
       <!-- Release information -->
       <switchmd:PublishingInformation>
           <switchmd:Federation>SWITCHaai</switchmd:Federation>
           <switchmd:Description>Attribute Map for SWITCHaai and AAI Test federation operated by SWITCH</switchmd:Description>
           <switchmd:Author>SWITCH Resource Registry</switchmd:Author>
           <switchmd:AuthorURL>https://aai-rr.switch.ch</switchmd:AuthorURL>
           <switchmd:CreationDate>2008-06-09 16:54:22 CEST</switchmd:CreationDate>
           <switchmd:Note>In case you want to use any of the local/bilateral attributes, comment them out at the bottom of the file</switchmd:Note>
       </switchmd:PublishingInformation>
    </Extensions>

    <!-- A persistent id attribute that supports personalized anonymous access. -->

    <!-- First, the deprecated version: -->
    <Attribute name="urn:mace:dir:attribute-def:eduPersonTargetedID" id="targeted-id">
        <AttributeDecoder xsi:type="ScopedAttributeDecoder"/>
    </Attribute>

    <!-- Second, the new version (note the OID-style name): -->
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="persistent-id">
        <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name"/>
    </Attribute>

    <!-- Third, the SAML 2.0 NameID Format: -->
    <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
        <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name"/>
    </Attribute>


    <!-- SWITCHaai attributes -->

    <!-- Attributes that are mandatory to implement -->
    
    <!-- E-mail -->
    <Attribute name="urn:mace:dir:attribute-def:mail" id="Shib-InetOrgPerson-mail" aliases="mail"/>
    <Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="Shib-InetOrgPerson-mail" aliases="mail"/>
    
    <!-- Home organization -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonHomeOrganization" id="Shib-SwissEP-HomeOrganization" aliases="homeOrganization"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.4" id="Shib-SwissEP-HomeOrganization" aliases="homeOrganization"/>
    
    <!-- Home organization type -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonHomeOrganizationType" id="Shib-SwissEP-HomeOrganizationType" aliases="homeOrganizationType"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.5" id="Shib-SwissEP-HomeOrganizationType" aliases="homeOrganizationType"/>
    
    <!-- Affiliation -->
    <Attribute name="urn:mace:dir:attribute-def:eduPersonAffiliation" id="Shib-EP-Affiliation" aliases="affiliation"/>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" id="Shib-EP-Affiliation" aliases="affiliation"/>
    
    <!-- Unique ID -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonUniqueID" id="Shib-SwissEP-UniqueID" aliases="uniqueID"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.1" id="Shib-SwissEP-UniqueID" aliases="uniqueID"/>
    
    <!-- Surname -->
    <Attribute name="urn:mace:dir:attribute-def:sn" id="Shib-Person-surname" aliases="surname"/>
    <Attribute name="urn:oid:2.5.4.4" id="Shib-Person-surname" aliases="surname"/>
    
    <!-- Given name -->
    <Attribute name="urn:mace:dir:attribute-def:givenName" id="Shib-InetOrgPerson-givenName" aliases="givenName"/>
    <Attribute name="urn:oid:2.5.4.42" id="Shib-InetOrgPerson-givenName" aliases="givenName"/>

    <!-- Attributes that are recommended to implement -->
    
    <!-- Business postal address -->
    <Attribute name="urn:mace:dir:attribute-def:postalAddress" id="Shib-OrgPerson-postalAddress" aliases="postalAddress"/>
    <Attribute name="urn:oid:2.5.4.16" id="Shib-OrgPerson-postalAddress" aliases="postalAddress"/>
    
    <!-- Business phone number -->
    <Attribute name="urn:mace:dir:attribute-def:telephoneNumber" id="Shib-Person-telephoneNumber" aliases="telephoneNumber"/>
    <Attribute name="urn:oid:2.5.4.20" id="Shib-Person-telephoneNumber" aliases="telephoneNumber"/>
    
    <!-- Study branch 3 -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonStudyBranch3" id="Shib-SwissEP-swissEduPersonStudyBranch3" aliases="studyBranch3"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.8" id="Shib-SwissEP-swissEduPersonStudyBranch3" aliases="studyBranch3"/>
    
    <!-- Study level -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonStudyLevel" id="Shib-SwissEP-swissEduPersonStudyLevel" aliases="studyLevel"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.9" id="Shib-SwissEP-swissEduPersonStudyLevel" aliases="studyLevel"/>
    
    <!-- Staff category -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonStaffCategory" id="Shib-SwissEP-swissEduPersonStaffCategory" aliases="staffCategory"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.10" id="Shib-SwissEP-swissEduPersonStaffCategory" aliases="staffCategory"/>
    
    <!-- Matriculation number -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonMatriculationNumber" id="Shib-SwissEP-MatriculationNumber" aliases="matriculationNumber"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.11" id="Shib-SwissEP-MatriculationNumber" aliases="matriculationNumber"/>

    <!-- Attributes that are optional to implement -->
    
    <!-- Date of birth -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonDateOfBirth" id="Shib-SwissEP-DateOfBirth" aliases="dateOfBirth"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.2" id="Shib-SwissEP-DateOfBirth" aliases="dateOfBirth"/>
    
    <!-- Gender -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonGender" id="Shib-SwissEP-Gender" aliases="gender"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.3" id="Shib-SwissEP-Gender" aliases="gender"/>
    
    <!-- Preferred Language -->
    <Attribute name="urn:mace:dir:attribute-def:preferredLanguage" id="Shib-InetOrgPerson-preferredLanguage" aliases="preferredLanguage"/>
    <Attribute name="urn:oid:2.16.840.1.113730.3.1.39" id="Shib-InetOrgPerson-preferredLanguage" aliases="preferredLanguage"/>
    
    <!-- Home postal address -->
    <Attribute name="urn:mace:dir:attribute-def:homePostalAddress" id="Shib-InetOrgPerson-homePostalAddress" aliases="homePostalAddress"/>
    <Attribute name="urn:oid:0.9.2342.19200300.100.1.39" id="Shib-InetOrgPerson-homePostalAddress" aliases="homePostalAddress"/>
    
    <!-- Private phone number -->
    <Attribute name="urn:mace:dir:attribute-def:homePhone" id="Shib-InetOrgPerson-homePhone" aliases="homePhone"/>
    <Attribute name="urn:oid:0.9.2342.19200300.100.1.20" id="Shib-InetOrgPerson-homePhone" aliases="homePhone"/>
    
    <!-- Mobile phone number -->
    <Attribute name="urn:mace:dir:attribute-def:mobile" id="Shib-InetOrgPerson-mobile" aliases="mobile"/>
    <Attribute name="urn:oid:0.9.2342.19200300.100.1.41" id="Shib-InetOrgPerson-mobile" aliases="mobile"/>
    
    <!-- Study branch 1 -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonStudyBranch1" id="Shib-SwissEP-swissEduPersonStudyBranch1" aliases="studyBranch1"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.6" id="Shib-SwissEP-swissEduPersonStudyBranch1" aliases="studyBranch1"/>
    
    <!-- Study branch 2 -->
    <Attribute name="urn:mace:switch.ch:attribute-def:swissEduPersonStudyBranch2" id="Shib-SwissEP-swissEduPersonStudyBranch2" aliases="studyBranch2"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.7" id="Shib-SwissEP-swissEduPersonStudyBranch2" aliases="studyBranch2"/>
    
    <!-- Organization path -->
    <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgDN" id="Shib-EP-OrgDN" aliases="orgDN"/>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.3" id="Shib-EP-OrgDN" aliases="orgDN"/>
    
    <!-- Organizational unit path -->
    <Attribute name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" id="Shib-EP-OrgUnitDN" aliases="orgUnitDN"/>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.4" id="Shib-EP-OrgUnitDN" aliases="orgUnitDN"/>
    
    <!-- Entitlement -->
    <Attribute name="urn:mace:dir:attribute-def:eduPersonEntitlement" id="Shib-EP-Entitlement" aliases="entitlement"/>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="Shib-EP-Entitlement" aliases="entitlement"/>
    
    <!-- User ID -->
    <Attribute name="urn:mace:dir:attribute-def:uid" id="Shib-Person-uid" aliases="uid"/>
    <Attribute name="urn:oid:0.9.2342.19200300.100.1.1" id="Shib-Person-uid" aliases="uid"/>
    
    <!-- Employee number -->
    <Attribute name="urn:mace:dir:attribute-def:employeeNumber" id="Shib-InetOrgPerson-employeeNumber" aliases="employeeNumber"/>
    <Attribute name="urn:oid:2.16.840.1.113730.3.1.3" id="Shib-InetOrgPerson-employeeNumber" aliases="employeeNumber"/>
    
    <!-- Persistent ID -->
    <!--
    <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="Shib-PersistentID" aliases="persistent-id"/>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" id="Shib-PersistentID" aliases="persistent-id"/>
    -->


    <!-- local attributes -->
    
    <!-- Organizational Unit -->
    <!--
    <Attribute name="urn:mace:dir:attribute-def:ou" id="Shib-Person-ou" aliases="ou"/>
    <Attribute name="urn:oid:2.5.4.11" id="Shib-Person-ou" aliases="ou"/>
    -->
    
    <!-- Authorization attribute -->
    <!--
    <Attribute name="urn:mace:switch.ch:attribute-def:UniBEapplAuthorisation" id="Shib-Custom-UniBeApplAuthorisation" aliases="uniBEApplAuthorisation"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.1000" id="Shib-Custom-UniBeApplAuthorisation" aliases="uniBEApplAuthorisation"/>
    -->
    
    <!-- Principal Name -->
    <!--
    <Attribute name="urn:mace:dir:attribute-def:eduPersonPrincipalName" id="Shib-EP-principalName" aliases="principalName"/>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="Shib-EP-principalName" aliases="principalName"/>
    -->
    
    <!-- Assurance Level -->
    <!--
    <Attribute name="urn:mace:dir:attribute-def:assurance" id="Shib-EP-Assurance" aliases="assurance"/>
    <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" id="Shib-EP-Assurance" aliases="assurance"/>
    -->
    
    <!-- AAA Usage Limit -->
    <!--
    <Attribute name="urn:mace:switch.ch:aaitest:aaa.unibe.ch:attribute-def:UsageLimit" id="Shib-Custom-UnibeUsageLimit" aliases="unibeUsageLimit"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.1001" id="Shib-Custom-UnibeUsageLimit" aliases="unibeUsageLimit"/>
    -->
    
    <!-- Lausanne Group membership -->
    <!--
    <Attribute name="urn:mace:switch.ch:SWITCHaai:unil.ch:unilMemberOf" id="Shib-Custom-UnilMemberOf" aliases="unilMemberOf"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.1003" id="Shib-Custom-UnilMemberOf" aliases="unilMemberOf"/>
    -->
    
    <!-- Organization Unit Code -->
    <!--
    <Attribute name="urn:mace:switch.ch:SWITCHaai:unige.ch:attribute-def:unigeChOuCode" id="Shib-Custom-UnigeOuCode" aliases="unigeOuCode"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.1004" id="Shib-Custom-UnigeOuCode" aliases="unigeOuCode"/>
    -->
    
    <!-- UZH SAP User ID -->
    <!--
    <Attribute name="urn:mace:unizh.ch:uzhSapUserId" id="Shib-Custom-UzhSAPUserId" aliases="uzhSAPUserId"/>
    <Attribute name="urn:oid:2.16.756.1.2.5.1.1.1005" id="Shib-Custom-UzhSAPUserId" aliases="uzhSAPUserId"/>
    -->

</Attributes>
