Any SCHAC attributes we should add to default mappings?
Peter Schober
peter.schober at univie.ac.at
Sat Jun 9 04:00:59 EDT 2018
* Cantor, Scott <cantor.2 at osu.edu> [2018-06-08 17:11]:
> I'm not that familiar with the schema, the only one that's in the
> default file now is schacHomeOrganization (commented out).
We only added schacHomeOrganization in the past to enable the SP to
perform shibmd:Scope checking on its values. I.e., it's part of the
default attribute-policy.xml (with a new
AttributeValueMatchesShibMDScope rule), even though the map entry is
commented out by default.
(Scope checking wasn't even part of the original design, but it made
sense to do as established usage was consistent with published Scopes,
and some federations explicitly used this as drop-in substitute for
the scopes from ePSA or ePPN.)
Due to its similarly generic nature schacHomeOrganizationType would
probably have been next in line, but we failed to find external
standards or make up a taxonomy ourselfs that would cover all org
types. Cf. the effort to get the "academic" entity category off the
ground, and that was only a single, very coarse "type".
(Also the use-cases presented were not sufficiently pressing /
convincing to warrant spending more effort.)
SCHAC is such a mixed bag of things, there's no commonly used subset.
-peter
More information about the dev
mailing list