monitoring and non-person IDs

[Cantor, Scott]

On 6/19/15, 9:13 AM, "users on behalf of Jerry Shipman" <users-bounces at shibboleth.net on behalf of jes59 at cornell.edu> wrote:
>
>I am sorry, I think that I probably rambled on and it was not clear. I had intended to ask a policy/practice question rather than a technical/implementation question. 
>I think something along the lines of: 
>  "what steps should we take in order to be a good citizen of the federation, while monitoring these applications?"

There's absolutely nothing about it that affects your federation participation apart from controlling access to the account, like any account, particularly if you need to assert test data for it that would not in fact be correct. For a typical service account, that's often not needed, but sometimes it is.

>- The other was that I could make sure that we never assert any eduPersonAffiliations for monitoring users.

We have thousands of guests for which we assert no affiliation. Authentication to an IdP means nothing. Never has, never will.

>Does anyone know of a recommendation or requirement or preference from the federation about what steps should be taken?

No, but questions about InCommon are better handled on the participants list. There are far more people not using InCommon on this list than are.

-- Scott