Description | Indicates the relationship between the user and a specific (security) domain with his home organisation. The values consist of an affiliation and a security domain, concatenated with a @-sign, i.e. <affiliation>@<sub.domain.nl>. In this way, the relationship between a user and his institution can be specified in a fine-grained way. For example, it allows for specification that a user is a student in the Physics department, or a secretary works in a specific department within a faculty. The affiliation-part must be one of the values allowed for the eduPersonAffiliation attribute (see above). At the moment, these are: student — studentemployee — all employeesstaff — academic staffmember — anyone employed by or studying at the institution
The domain-part of this attribute must be subdomain of the user's schacHomeOrganization. This subdomain does not necessarily need to exist in DNS. For example, if the user's institution uses the schacHomeOrganization uniharderwijk.nl, valid valued for the domein part of the eduPeronScopedAffiliation eduPersonScopedAffiliation would be science.uniharderwijk.nl, physics.science.uniharderwijk.nl, etc. |
Notes | - This attribute can be used to express the faculty, field of study, department, etc to which a user is affiliated.
- As this attribute is multivalued, it is easily posible to express that a iuser is a student in a certain field, and at the same time is employed by a different department of the university
- There is no common register or policy of which subdomains are valid, or which express a certain concept. For example,
staff@cs.uniharderwijk.nl might indicate the user is a staff member of the computer science department of the University of Harderwijk, while staff@cs.surfnet.nl might indicate an employee of the community support department of SURFnet. Therefore, if you are an SP and would like to use this attribute, you always need to confer with the university if you need to interpret these values.
|