Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
Jump to:
| Table of Contents | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Overview
eduPersonScopedAffiliation defines a set of controlled vocabulary specifying a person's relationship(s) to the institution in broad categories such as student, faculty, staff, alum, etc. eduPersonScopedAffiliation is defined in the eduPerson LDAP object class.
This identifier is scoped and of the form affiliation@scope:
The left component (
affiliation)is one of the values from the eduPersonAffiliation controlled vocabulary. Within the same assertion, the values asserted in eduPersonAffiliation should match those asserted in eduPersonScopedAffiliation.The
scopeportion MUST be the administrative domain of the identity system where the identifier was created and assigned. Thescopeportion MAY contain any Unicode character. The length of the scope portion MUST be less than or equal to 256 characters. Note that the use of characters outside the seven-bit ASCII set or extremely long values in the scope portion may cause issues with interoperability.
See also: Scope in InCommon metadata
Permissible values
See controlled vocabulary for user-attr-edupersonaffiliation.
SAML Response Example
| Code Block | ||
|---|---|---|
| ||
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
ID="..." Version="2.0" IssueInstant="2020-07-17T01:01:48Z"
Destination="...." InResponseTo="...">
...
<saml:Assertion ...>
...
<saml:AttributeStatement>
<saml:Attribute xmlns:x500="urn:oasis:names:tc:SAML:2.0:profiles:attribute:X500"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
FriendlyName="eduPersonScopedAffiliation"
x500:Encoding="LDAP">
<saml:AttributeValue xsi:type="xsd:string">member@example.edu</saml:AttributeValue>
<saml:AttributeValue xsi:type="xsd:string">faculty@example.edu</saml:AttributeValue>
<saml:AttributeValue xsi:type="xsd:string">employee@example.edu</saml:AttributeValue>
<saml:AttributeValue xsi:type="xsd:string">alum@example.edu</saml:AttributeValue>
</saml:Attribute>
...
</saml:AttributeStatement>
</saml:Assertion>
</samlp:Response>
|
See Also
Working with user data
| Content by Label | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Related content
| Content by Label | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
Get help
Can't find what you are looking for?
| Button Hyperlink | ||||||||
|---|---|---|---|---|---|---|---|---|
|