AW: Assigning edupersonaffiliation attribute with AD

[Ortner Nikolaus]

> s/users/accounts/

I tend to describe the user no matter which of his accounts he has used for login -> think it's getting complicated otherwise.

If the affiliation makes a difference on SPs your people use and if you're sending only single-valued affiliations:
* How should the users know which account they have to use for which SP?
* What if a user - directly after he has visited a SP he best uses with his staff-account - visits a SP where only "students" are allowed? - ad personam he is eligible, but the system would kick him out.

Kind regards.