Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...


OpenID Connect Claim

SAML Attribute

Description of attribute

sub


OpenID Subject (not available as SAML attribute)

given_name

urn:mace:dir:attribute-def:givenName

Given name

family_name

urn:mace:dir:attribute-def:sn

Surname

name

urn:mace:dir:attribute-def:cn

Common name (e.g. Prof.dr. John Doe)

nickname

urn:mace:dir:attribute-def:displayName

Display name (e.g. Prof.dr. Jane Doe)

preferred_username

urn:mace:dir:attribute-def:displayName

Display name (e.g. Prof.dr. Jane Doe)

locale

urn:mace:dir:attribute-def:preferredLanguage

Preferred language (e.g. nl, en)

email

urn:mace:dir:attribute-def:mail

Email address

schac_home_organization

urn:mace:terena.org:attribute-def:schacHomeOrganization

Organization (e.g. university.nl)

schac_home_organization_type

urn:mace:terena.org:attribute-def:schacHomeOrganizationType

Organization type (e.g. educationInstitution, universityHospital)

edu_person_affiliations

urn:mace:dir:attribute-def:eduPersonAffiliation

Affiliation (student, employee, etc)

edu_person_scoped_affiliations

urn:mace:dir:attribute-def:eduPersonScopedAffiliation

Scoped affiliation (e.g. student@uniharderwijk.nl, faculty@uniharderwijk.nl )

edu_person_targeted_id

urn:mace:dir:attribute-def:eduPersonTargetedID

eduPersonTargetedID (This is a copy of the SURFconext generated NameID)

uids

urn:mace:dir:attribute-def:uid

UID (unique code for a person that is used as the login name within the institution)

schac_personal_unique_codes

urn:schac:attribute-def:schacPersonalUniqueCode

Personal code (e.g. student number)

edu_person_principal_name

urn:mace:dir:attribute-def:eduPersonPrincipalName

EduPersonPrincipleName (This is a scoped identifier. e.g. piet@studenthartingcollege.nl)

edu_person_entitlements

urn:mace:dir:attribute-def:eduPersonEntitlement

eduPersonEntitlement (e.g. urn:x-surfnet:surf.nl:surfdrive:quota:100)
-nlEduPersonOrgUnitDeprecated and unavailable in both OIDC and SAML
-nlEduPersonStudyBranchDeprecated and unavailable in both OIDC and SAML
-nlStudielinkNummerDeprecated and unavailable in both OIDC and SAML