Page History

urn:mace

urn:mace:dir:attribute-def:eduPersonAffiliation

urn:oid

urn:oid:1.3.6.1.4.1.5923.1.1.1.1

Multiplicity

multi-valued

Description

Indicates the relationship between the user and his home organisation (institution). The following values are permitted within SURFconext:

• student — A person enrolled at an institution, an external student or course participant
• employee — A person with a position at or labour agreement with an institution
• staff — All academic staff (in Dutch: wetenschappelijk personeel, or WP) and teachers
• member — Anyone that holds at least one of the above affiliations is also a member
• pre-student — A person who has registered to start studying, but is not yet a full student. See this page (Dutch only) for more information about pre-students and the terms and conditions under which such users are allowed access. Pre-students will never be allowed access to service providers without prior consent from the service provider.

The following value(s) are allowed, but not (yet) used by any services:

• affiliate — A person who is authorised by the Institution, pursuant to the licence model concluded by the Institution, to use the Service

Use the above mentioned definitions to determine which affiliation a user gets. If the definitions are not sufficient, please use common sense.

Notes

• Any user who has the affiliation student, employee, or staff, should also have the value member.
• Identity Providers might internally use additional values for the affiliation attribute, such as alum. Per SURFconext policy, the IdP may not allow such users to access SURFconext.
• Other values mentioned in the eduPerson specification include: faculty, library-walk-in. These values are not used within SURFconext.
• According to the eduPerson specification, the values of this attribute are case insensitive; for interoperability reasons however, we require lower-case values as specified above in SURFconext.