Page History

...

Friendly name	Attribute name	Definition	Data type	Example
ID	(NameId) urn:oid:1.3.6.1.4.1.5923.1.1.1.10	eduPerson	UTF8 string (unbounded)	bd09168cf0c2e675b2def0ade6f50b7d4bb4aae
Surname	urn:mace:dir:attribute-def:sn urn:oid:2.5.4.4	X.520	UTF8 string (unbounded)	Vermeegen ?
Given name	urn:mace:dir:attribute-def:givenName urn:oid:2.5.4.42	X.520	UTF8 string (unbounded)	Mërgim Lukáš ??
Common name	urn:mace:dir:attribute-def:cn urn:oid:2.5.4.3	X.520	UTF8 String (unbounded)	Prof.dr. Mërgim Lukáš Vermeegen ? ??, PhD.
Display name	urn:mace:dir:attribute-def:displayName urn:oid:1.3.6.1.4.1.1466.115.121.1.15	RFC2798	UTF8 String (unbounded)	Prof.dr. Mërgim L. Vermeegen ? ??, PhD.
Email address	urn:mace:dir:attribute-def:mail urn:oid:0.9.2342.19200300.100.1.3	RFC4524	RFC-5322 address (max 256 chars)	m.l.vermeegen@university.example.org "very.unusual.@.unusual.com"@example.com <ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b4f4df374e793177-8eaed700-4de04ac1-80a2aaa4-187db4ecbb46f73d3dea73c6"><ac:plain-text-body><![CDATA[mlv@[IPv6:2001:db8::1234:4321]	]]></ac:plain-text-body></ac:structured-macro>
Organization	urn:mace:terena.org:attribute-def:schacHomeOrganization urn:oid:1.3.6.1.4.1.25178.1.2.9	Schac	RFC-1035 domain string	university.example.org
Organization Type	urn:mace:terena.org:attribute-def:schacHomeOrganizationType urn:oid:1.3.6.1.4.1.25178.1.2.10	Schac	RFC-2141 URN see Schac standard	urn:mace:terena.org:schac:homeOrganizationType:int:university urn:mace:terena.org:schac:homeOrganizationType:es:opi
Affiliation	urn:mace:dir:attribute-def:eduPersonAffiliation urn:oid:1.3.6.1.4.1.5923.1.1.1.1	eduPerson	Enum type (UTF8 String)	faculty, student, staff, alum, member, affiliate, employee, library-walk-in
Entitlement	urn:mace:dir:attribute-def:eduPersonEntitlement urn:oid:1.3.6.1.4.1.5923.1.1.1.7	eduPerson	RFC-2141 URN Multi-valued	to be determined
PrincipalName	urn:mace:dir:attribute-def:eduPersonPrincipalName urn:oid:1.3.6.1.4.1.5923.1.1.1.6	eduPerson	UTF8 String user@domain	not.a@vålîd.émail.addreß ??@aninstitutionname
isMemberOf	urn:mace:dir:attribute-def:isMemberOf urn:oid:1.3.6.1.4.1.5923.1.5.1.1	eduMember	RFC-2141 URN Multi-valued	urn:collab:org:surf.nl urn:collab:org:clarin.org
uid	urn:mace:dir:attribute-def:uid urn:oid:1.3.6.1.4.1.1466.115.121.1.15	RFC4519	UTF8 String (max 256 chars)	s9603145 flåp_example.edu
preferredLanguage	urn:mace:dir:attribute-def:preferredLanguage urn:oid:2.16.840.1.113730.3.1.39	RFC2798	BCP47 language tag	nl-BE en-US

...

urn:mace	urn:mace:dir:attribute-def:mail
urn:oid	urn:oid:0.9.2342.19200300.100.1.3
Multiplicity	multi-valued
Description	e-mail address; syntax in accordance with RFC 5322
Notes	Multiple email addresses are allowed An email address is not necessarily the email address of this person at the institution. Do not use this attribute to uniquely identify a user. Use the NameId or eduPersonPrincipleName NameId instead. A user's email address may change over time, or an IdP may allow a user to change this value themselves. This makes that attribute unsuitable for authentication and authorization purposes.

...

urn:mace	urn:mace:dir:attribute-def:eduPersonEntitlement
urn:oid	urn:oid:1.3.6.1.4.1.5923.1.1.1.7
Multiplicity	multi-value
Description	entitlement; custom URI (URL or URN) that indicates an entitlement to something.
Notes	This attribute can be used to communicate entitlements, roles, etc, from identity providers to services, which can be used, for example, for authorization. The values of this attribute are scoped to the identity provider that is authoritative for the attribute. See also the SURFconext entitlement namespacing policy.

Principle name

urn:mace	urn:mace:dir:attribute-def:eduPersonPrincipalName
urn:oid	urn:oid:1.3.6.1.4.1.5923.1.1.1.6
Multiplicity	single-value
Description	Unique "net ID" beyond the scope of the particular institution, in the form "<user>@<scope>".E.g. "s012001234@student.example.com". identifier for a user.
Notes	Although this value resembles an email address, it should not MUST NOT be used as suchan email address. In many cases mail cannot be delivered to this "address". This value should never be reassigned to another user. I.e. after a user leaves an institution, it should not be assigned to another (future) user.

...

Even though this value uniquely identifies a user, it is not guaranteed that it is persistent over sessions (even though it usually is).
Do not use this to uniquely identify users. Use the NameId instead.

Preferred Language

urn:mace	urn:mace:dir:attribute-def:preferredLanguage
urn:oid	urn:oid:2.16.840.1.113730.3.1.39
Multiplicity	single-value
Description	a two-letter abbreviation for the preferred language according to the ISO 639 language abbreviation code table; no subcodes.
Notes	Used to indicate an individual's preferred written or spoken language. This is useful for international correspondence or human-computer interaction. Values for this attribute type MUST conform to the definition of the Accept-Language header field defined in RFC 2068 with one exception: the sequence "Accept-Language" ":" should be omitted. This is a single valued attribute type.

Attributes defined in urn:mace:terena.org:attribute-def

...

Page tree

Versions Compared

Old Version 25

New Version 26

Key

Principle name

Preferred Language

Attributes defined in urn:mace:terena.org:attribute-def