Getting Started

• Read me first: introducing-user-data
• Choosing the right user identifiers
• Handling data exchange in SAML

Streamline access with entity categories

• understanding-federated-user-identifiers

Streamline user access with R&S

• What is an entity category?

• REFEDS Research & Scholarship (R&S) entity category

• <future>REFEDS Authentication Only entity category</>

• <future>REFEDS Anonymous Authorization entity category</>

• <future>REFEDS Pseudonymous Authorization entity category</> 

• R&S Explained in Plain English

References and additional reading

• eduPerson LDAP Object Class schema
• SAML v2.0 Subject Identifier Attributes Profile Version 1.0
• <future> Attributes vs "claims" (for the Microsoft / OIDC etc. camp)
• <future> Privacy considerations
• <future> Negotiating data release
• <future> Consent?

Popular User Attributes in InCommon

Person

Identifiers

• SAML General Purpose Subject Identifier (subject-id)
• SAML Pairwise Subject Identifier (pairwise-id)
• eduPersonPrincipalName (eppn)
• eduPersonTargetedID (eptid) -deprecated-
• user-attr-epuid

Person

Characteristics and

Contacts

• user-attr-cn
• user-attr-displayname
• user-attr-givenname
• user-attr-sn
• Email address (mail)

Authorization

Support Information

• user-attr-edupersonaffiliation
• user-attr-edupersonscopedaffiliation
• user-attr-edupersonentitlement
• memberOf

Identity Assurance Information

• user-attr-edupersonassuranceisMemberOf