summaryrefslogtreecommitdiffstats
path: root/docs/simplesamlphp-reference-idp-remote.md
diff options
context:
space:
mode:
Diffstat (limited to 'docs/simplesamlphp-reference-idp-remote.md')
-rw-r--r--docs/simplesamlphp-reference-idp-remote.md8
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/simplesamlphp-reference-idp-remote.md b/docs/simplesamlphp-reference-idp-remote.md
index a8520d4..89526fd 100644
--- a/docs/simplesamlphp-reference-idp-remote.md
+++ b/docs/simplesamlphp-reference-idp-remote.md
@@ -85,6 +85,14 @@ The following options are common between both the SAML 2.0 protocol and Shibbole
'no' => 'En tjeneste',
),
+`scope`
+: An array with scopes valid for this IdP.
+ The IdP will send scopes in scoped attributes, that is, attributes containing a value with an `@` sign and a domain name
+ after it.
+
+: When the `saml:FilterScopes` authentication processing filter is used, this list of scopes will determine the valid
+ scopes for attributes.
+
`SingleSignOnService`
: Endpoint URL for sign on. You should obtain this from the IdP. For SAML 2.0, SimpleSAMLphp will use the HTTP-Redirect binding when contacting this endpoint.