Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: iets duidelijker dat alum door de idp niet doorgelaten mag worden

...

urn:mace

urn:mace:dir:attribute-def:eduPersonAffiliation

urn:oid

urn:oid:1.3.6.1.4.1.5923.1.1.1.1

Multiplicity

multi-valued

Data typeUTF8 String (only the values enumerated below are allowed)

Description

Indicates the relationship between the user and his home organisation (institution). The following values are permitted within SURFconext:

  • student — A person enrolled at an institution, an external student or course participant
  • employee — A person with a position at or labour agreement with an institution
  • staff — All academic staff (in Dutch: wetenschappelijk personeel, or WP) and teachers
  • member — Anyone that holds at least one of the above affiliations is also a member

The following value(s) are allowed, but not (yet) used by any services:

  • affiliate — A person who is authorised by the Institution, pursuant to the licence model concluded by the Institution, to use the Service

Use the above mentioned definitions to determine which affiliation a user gets. If the definitions are not sufficient, please use common sense.

Examplessee above

Notes

  • Any user who has the affiliation student, employee, or staff, should also have the value member.
  • Identity Providers might internally use additional values for the affiliation attribute, such as alum. Per SURFconext policy, the IdP may not allow such users are not allowed to access to SURFconext.
  • Other values mentioned in the eduPerson specification include: faculty, library-walk-in. These values are not used within SURFconext.
  • According to the eduPerson specification, the values of this attribute are case insensitive; for interoperability reasons however, we require lower-case values as specified above in SURFconext.

...