Page History

urn:mace

urn:mace:dir:attribute-def:eduPersonScopedAffiliation

urn:oid

urn:oid:1.3.6.1.4.1.5923.1.1.1.9 

Multiplicity

multi-valued

Description

Indicates the relationship between the user and a specific (security) domain with his home organisation.  The values consist of an affiliation and a security domain, concatenated with a @-sign, i.e. <affiliation>@<sub.domain.nl>. In this way, the relationship between a user and his institution can be specified in a fine-grained way. For example, it allows for specification that a user is a student in the Physics department, or a secretary works in a specific department within a faculty.

The affiliation-part must be one of the values allowed for the eduPersonAffiliation attribute (see above). At the moment, these are:

• student — A person enrolled at an institution, an external student or course participant
• employee — A person with a position at or labour agreement with an institution
• staff — All academic staff (in Dutch: wetenschappelijk personeel, or WP) and teachers
• member — Anyone that holds at least one of the above affiliations is also a member

The following value(s) are allowed, but not (yet) used by any services:

• affiliate — A person who is authorised by the Institution, pursuant to the licence model concluded by the Institution, to use the Service

The domain-part of this attribute must be subdomain of the user's schacHomeOrganization. This subdomain does not necessarily need to exist in DNS. For example, if the user's university uses the schacHomeOrganization uniharderwijk.nl, valid values for the domain part of the eduPersonScopedAffiliation would be science.uniharderwijk.nl, physics.science.uniharderwijk.nl, etc.

Notes

• This attribute can be used to express the faculty, field of study, department, etc et.c to which a user is affiliated.
• As this attribute is multivalued, it is easily posible possible to express that a user is a student in a certain field, and at the same time is employed by a different department of the university
• There is no common register or policy of which subdomains are valid or express a certain concept. For example, staff@cs.uniharderwijk.nl might indicate the user is a staff member of the computer science department of the University of Harderwijk, while staff@cs.surfnet.nl might indicate an employee of the community support department of SURFnet. Therefore, if you are an SP and would like to use this attribute, you always need to confer with the university if you need to interpret these values.