how would we suggest improving the user experience at this SP

[Dave Perry]

We only send the actual staff/student usernames as unconverted eppn to internally hosted SPs - external SPs get the transientId (the computed one) + the eduPersonScopedAffiliation (Staff or Student, which is managed by IDM).

A student can, in theory, go to our Data Services team and insist on having their on file email address changed - so it would break anything tied to it.
IT have changed several major identity attributes of late, mainly due to our switch to AD for central authentication, including our staff email address format - our  usernames are the only thing that haven't change (even if staff get married etc).

So I'm taking the view that association by email address is not consistent enough.


Dave

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

Please rate our service in the annual Libraries & eLearning User survey.
You could win a £15 Amazon voucher!
For staff - http://library.hull-college.ac.uk/staffsurvey 
For students - http://library.hull-college.ac.uk/survey 

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Tom Scavo
Sent: 04 June 2014 19:04
To: Shib Users
Subject: Re: how would we suggest improving the user experience at this SP

On Wed, Jun 4, 2014 at 1:40 PM, David Bantz <dabantz at alaska.edu> wrote:
>
> On Wed, 4 Jun 2014, at 08:34 , Tom Scavo <trscavo at gmail.com> wrote:
>
> We've talked about tagging IdPs with
> various marks for best practices, but I really think we need a "package"
> of practices to capture into a mark of some kind.
>
> Something like this? https://spaces.internet2.edu/x/x4HYAg
>
> which states in part:
>
> "Support at least the following user attributes:...mail (== ePPN)"
>
> sigh….

You're the third person to react like that :-) so I may want to modify that. The idea is: If you were building your IdM from scratch, it would be advisable to define your email addresses and ePPNs to be the same. This may be the wrong list but...do folks agree with that?

Tom
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College owns the email infrastructure, including the contents.

Hull College is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT