<html><body><div id="zimbraEditorContainer" style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000" class="25"><div data-marker="__QUOTED_TEXT__">Hello<br><br>in my institution (French telecom higher education schools), we use shacUserStatus and shacProjectMembership .<br>if it can help .<br><br>Regards .<br><br>Jehan PROCACCIA <br>Ingénieur systemes et réseaux <br>Membre du comité de pilotage REVE: <br>Réseau d’Évry Val d'Essonne <br>+33160764436 <br><br>9 rue Charles Fourier - 91011 Evry Cedex <br>[ https://www.imt-bs.eu/ | www.imt-bs.eu ] - [ https://www.imt-bs.eu/ | www.telecom-sudparis.eu ]<br><br>----- Mail original -----<br>De: "Peter Schober" <peter.schober@univie.ac.at><br>À: dev@shibboleth.net<br>Envoyé: Lundi 11 Juin 2018 18:13:48<br>Objet: Re: Any SCHAC attributes we should add to default mappings?<br><br>* Cantor, Scott <cantor.2@osu.edu> [2018-06-11 16:49]:<br>> Thanks, I'll get commented rules added before final release, keep any requests coming.<br><br>Note that the shib dev list may not be the best forum to gauge usage<br>of SCHAC attributes. And most attributes will be used by someone,<br>somewhere, for some obscure use-case or another.<br><br>schacHomeOrganizationType still suffers from all the issues I<br>documented years ago, AFAICT:<br><br>"For schacHomeOrganizationType one finds different values in the old<br>registry, the new registry, the PDF specification and the LDAP schema<br>file. This is very confusing and should be harmonized and kept<br>consistent. The easiest way to achive this is to have a single version<br>(i.e., document) of the spec, also containing relevant bits from the<br>LDAP-schema." -- https://wiki.refeds.org/display/STAN/SCHAC+Plan<br><br>See the mess from only a few federations reporting their usage:<br>https://wiki.refeds.org/display/STAN/SchacHomeOrgType+usage<br>(Ignore everything with swissEduPersonHomeOrganizationType in it,<br>those are not SCHAC attributes and have nothing to do with the survey<br>or topic at hand.)<br><br>Earliest discussions I could find about this (e.g. "Vocabulary for<br>schacHomeOrganizationType") go back until 2006, so those issues have<br>been around for over a decade, with no signs of sudden improvements.<br><br>The most recent thread I could find is from 2014:<br>https://www.terena.org/mail-archives/schac/msg00543.html<br>which seems to suggest that<br>* schacHomeOrgType may not be suitable for authZ purposes since it was<br> changed to be multi-valued,<br>* what's left of that use-case (in combination with ePA/ePSA) has<br> been taken over by the "academic IDP" entity category, as said<br> earlier. I.e, the "academic IDP" category has taken a subset of the<br> larger schacHomeOrgType problem space and did somethign about<br> it. (Which ironically also hasn't lead anywhere, AFAICT.)<br> <br>Unless the inconsistencies in the controlled vocabulary are removed I<br>think one can only recommend against using this attribute in<br>large-scale deployments, esp internationally. Every thread about SCHAC<br>in the last 10 years seem to come to that conslusion, I have the<br>impression.<br><br>-peter<br>-- <br>To unsubscribe from this list send an email to dev-unsubscribe@shibboleth.net</div><br></div></body></html>