urn:mace | urn:mace:dir:attribute-def:uid |
urn:oid | urn:oid:0.9.2342.19200300.100.1.1 |
Multiplicity | single-valued (multi-valued in the specification, but within SURFconext only 1 value is allowed) |
| Data type | UTF8 String (max 256 chars); use of spaces and @-characters is discouraged. |
Description | The unique code for a person that is used as the login name within the institution. |
| Examples | s9603145
piet
flåp@example.edu (See note below)
|
Notes | - The uid is not a unique identifier for SURFconext users. Uid values are at most unique for each IdP.
- Ideally the uid is not only a login name/code but also an identifier that is guaranteed as being unique within the institution over the course of time. At the moment, there is no such guarantee.
- Use the NameId for unique identifiers in SURFconext rather than uid.
- Use the eduPersonPrincipalName attribute if a human-readable unique identifier is required
- A uid may contain any unicode character. E.g., "
org:surfnet.nl:joe von stühl" is a valid uid. - SURFconext translates @-characters in the uid to underscores before constructing the NameID. flåp@example.edu translates to flåp_example.edu.
|