Page History

...

urn:mace	urn:mace:terena.org:attribute-def:schacHomeOrganization
urn:oid	urn:oid:1.3.6.1.4.1.25178.1.2.9
Multiplicity	single-valued
Data type	RFC-1035 domain string. The domain MUST be a secondary-level domain that is under control by the institution. Preferably, the institution's main domain name should be used.
Description	The user's organisation using the organisation's domain name; syntax in accordance with RFC 1035.
Examples	uniharderwijk.nl example.nl
Notes	In the past, SURFconext used to send the home organisation in the attribute urn:oid:1.3.6.1.4.1.1466.115.121.1.15, which was incorrect. Since 2013, the correct oid urn:oid:1.3.6.1.4.1.25178.1.2.9 is in use. For reasons of compatibility, the old (wrong) key is also still sent. It should not be used in new implementations. Matching values against this attribute should be case-insensitive, i.e. the values "uniharderwijk.nl" and "UniHarderwijk.nl" should be considered equal. It is desirable to have the same value for all your users. SURFconext will store the allowed value for your institution in our configuration so we can check that no illegal values are being sent.

Organization type

urn:mace	urn:mace:terena.org:attribute-def:schacHomeOrganizationType
urn:oid	urn:oid:1.3.6.1.4.1.25178.1.2.10
Multiplicity	single-value
Data type	RFC-2141 URN (see Schac standard)
Description	designation of the type of organisation as defined on http://www.terena.org/registry/terena.org/schac/homeOrganizationType
Examples	urn:mace:terena.org:schac:homeOrganizationType:int:university urn:mace:terena.org:schac:homeOrganizationType:es:opi
Notes	Attribute values are registered by Terena on http://www.terena.org/registry/terena.org/schac/homeOrganizationType In practice, this attribute is not/hardly used by IdPs or SPs Please contact support@surfconext.nl if you would like to use this attribute

...

urn:mace	urn:mace:dir:attribute-def:eduPersonPrincipalName
urn:oid	urn:oid:1.3.6.1.4.1.5923.1.1.1.6
Multiplicity	single-valued
Data type	UTF8 String of the form `user@domain`. The domain MUST be equal to or a be a subdomain of the schacHomeOrganization.
Description	Unique identifier for a user.
Examples	piet.jønsen@example.edu not.a@vålîd.émail.addreß
Notes	Although this value resembles an email address, it MUST NOT be used as an email address. In many cases mail cannot be delivered to this "address". Even though this value uniquely identifies a user, it is not guaranteed that it is persistent over sessions (even though it usually is). Do Preferedly do not use this to uniquely identify users. Use the NameId instead. SURFconext will store the allowed domain part for your institution in our configuration so we can check that no illegal values are being sent.

urn:mace	urn:mace:dir:attribute-def:isMemberOf
urn:oid	urn:oid:1.3.6.1.4.1.5923.1.5.1.1
Multiplicity	multi-valued
Data type	RFC-2141 URN
Description	Lists the collaborative organisations the user is a member of.
Examples	`urn:collab:org:surf.nl`
Notes	Attribute values are URIs (URN or URL) The only currently supported value is `urn:collab:org:surf.nl`, which indicated that the user's home institution is a member of SURFnet In the future, this can be used to determine membership of non-institutional collaborative organisations. This attribute is generated by SURFconext and is available to SPs; it should not be set by IdPs.

...