Skip to main content
Version: 26.2

Add a new attribute

Create one or more attributes from the Dictionary page as follows:

  1. Click Actions > Add new in the upper right corner.

  2. In the Namespace dropdown, filter the list by typing in the Search... field, then select the appropriate namespace.

    If the required namespace is not already defined, type the complete namespace and click + Add "...".

    warning

    Do not use reserved words as namespaces, dot-delimited namespace segments, or attribute names. Read the Reserved words section for the complete list.

  3. Enter a unique name for your attribute in the Name field.

  4. Under XACML ID, choose the identifier that policy enforcement points (PEPs) send in authorization requests to identify this attribute:

    • Same as FQN (default): The XACML ID is identical to the attribute's Fully Qualified Name (FQN).
    • Custom URI: Enter a different XACML ID. Select this option only if your PEPs already use a different identifier, or if you need characters that are not valid in an FQN.
    note

    A custom XACML ID is validated as a syntactically valid URI. The stricter naming rules that apply to the FQN do not apply to it.

    warning

    Make sure the XACML ID you set matches what your PEPs send. You can change the XACML ID of an existing attribute later, but doing so can break integrations that rely on the previous value. Read Manage attributes for details.

  5. Optionally, you can add details or some information about this attribute in the Description field.

  6. Select a data Type and a Category from the respective dropdown menus.

  7. Select the Cache profile you want to apply.

    If you haven't configured any custom profiles, the Default will be used. Read the Cache configuration section for details.

  8. If you want to create more than one attributes, check the Add another attribute box.

  9. Click Save to my workspace to finalize your attribute.

    A new entry for the attribute you just created displays in the Dictionary.

tip

To use the XACML ID elsewhere, for example to share it with a PEP developer, copy it from the attribute's details in the Dictionary.