...
See the SCHema for ACademia Wiki for more information about this attribute. The The upstream registry for the namespace namespace urn:schac:personalUniqueCode:* can be found at https://wiki.refeds.org/display/STAN/SCHAC+URN+Registry. For examples and notes for usage in SURFconext, see Attributes in SURFconext.
...
<scope>identifies the scope for the identifier. CurrentlyCurrently, onlylocalis allowed, which specifies that the identifier is meant for use within a specific institution only.
...
<organisation_id>identifies the organisation which has issues issued the specified identifier. The The format is a domain name as specified in RFC 1035. For use in SURFconext, this identifier MUST be equal to the organisation's schacHomeOrganization.<id_type>identifies the type of the identifier. The The following values are allowed:employeeid:the followingid_tokenspecifies an employee of the organisationstudentid: the followingid_tokenspecifies a student of the organisationmemberid: the followingid_tokenspecifies a person with some kind of generic membership of the organisation. This This could be used by organisations which use a common identifier for employees and students.
<id_token>is the internal identifier of the specified type, issued by the specified organisation. Note Note that the identifier should be a proper URN, so the<id_token>may only consist of the characters specified in section 2.2 of RFC2141, i.e. only the following are allowed:lower case letter (
a-z)capital letters (
A-Z)numbers (
0-9)the following special characters:
( ) + , . = @ ; $ _ ! * ' -
...