Getting Started

• Read me first: introducing-user-data
• understanding-federated-user-identifiers

• Choosing the right user identifiers
• Handling data exchange in SAML

Streamline access with entity categories

• What is an entity category?

• REFEDS Research & Scholarship (R&S) entity category

  R&S Explained in Plain English

• <future>REFEDS Authentication Only entity category</>

• <future>REFEDS Anonymous Authorization entity category</>

• <future>REFEDS Pseudonymous Authorization entity category</> 

References and additional reading

• eduPerson LDAP Object Class schema
• SAML v2.0 Subject Identifier Attributes Profile Version 1.0
• <future> Attributes vs "claims" (for the Microsoft / OIDC etc. camp)
• <future> Privacy considerations
• <future> Negotiating data release
• <future> Consent?

Attributes (supported?)

in InCommon

Person

identifiers

• SAML General Purpose Subject Identifier (subject-id)
• SAML Pairwise Subject Identifier (pairwise-id)
• eduPersonPrincipalName (eppn)
• eduPersonTargetedID (eptid) -deprecated-
• user-attr-epuid

Person

characteristics and

contacts

• user-attr-cn
• user-attr-displayname
• user-attr-givenname
• user-attr-sn
• Email address (mail)

Authorization

support information

• eduPersonOrgDN
• user-attr-edupersonaffiliation
• user-attr-edupersonscopedaffiliation
• user-attr-edupersonentitlement

Identity Assurance Information

• memberOf
• isMemberOfuser-attr-edupersonassurance