edupersonAffiliation attribute fields

[Curry, Warren]

Well you can create eduPerson Scoped affiliation values..example might be...     faculty at ufl.edu<mailto:faculty at ufl.edu>  vs faculty at ec.ufl.edu<mailto:faculty at ec.ufl.edu>  this could differentiate different campuses for example.

At UF we have a large number of internal UF affiliations not eduPerson schema attributes.   We do at times use these with a n SP that is off campus.  Although not our preferred or normal practice.

I am not sure if this helps.  You can see more about UF affiliations at http://identity.it.ufl.edu/identity-coordination/uf-directory-affiliations/identity-registry-affiliations/

Warren H. Curry
UFIT - Identity Access Management
PO Box 113359,  2008 NE Waldo Rd
352-273-1383

Have a great day!!!

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Morris, Andi
Sent: Thursday, October 25, 2012 11:32 AM
To: users at shibboleth.net
Subject: edupersonAffiliation attribute fields

Hi all,
Just a quick one and hopefully an easy one for the more experienced Shibboleth admins than myself.  Currently we assign edupersonaffiliation attributes dependent on AD Organisational Unit name, but I've been requested to split these users up further to separate affiliate members, and UK Affiliate members to allow differing access to resources.

I could just tag one of them 'employee' or similar, but I don't want to start assigning these fields to arbitrarily in case we start using Shibboleth more extensively in the future and require these attributes to be used elsewhere.

Is there scope for adding more edupersonaffiliation attributes than the standard?

  *   member
  *   student
  *   employee
  *   faculty
  *   staff
  *   alum
  *   affiliate
Cheers,
Andi


---------------------------------------------------------------
Andi Morris
Technical Security Analyst
Systems and Communications Services
Information Services Division
Cardiff Metropolitan University
Cardiff
Wales
CF5 2YB

02920 205720
--------------------------------------------------------------

________________________________

>From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o'r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121025/e57c915e/attachment.html