eduPersonEntitlement Format

[Andrew Morgan]

On Mon, 3 Apr 2017, Brian Moon wrote:

> Hello all,
>
> We are currently setting up our Shibboleth environment and just recently
> extended our schema to include eduPerson attributes.  One question that has
> come up, though, is how we want to format the values in the
> eduPersonEntitlement field.  From reading about it, the impression I'm
> getting is that the recommendation today is to set it to a URL somewhere
> within our domain.  For those of you who use a URL, do you have it resolve
> to a page that actually exists?  If so, what content do you recommend
> putting on that page?  And who would actually see this information?
>
> For those of you who do not use a URL, what do you use instead?
>
> Thanks!
> Brian

Brian,

We actually use both URL and URN formats in Shibboleth.

Comcast/Xfinity asked us to send the following URL value:

   http://www.xfinityoncampus.com/xoc-access

For our Pac-12 TV integration, we worked with the vendor to settle on this 
value in our MACE namespace:

   urn:mace:oregonstate.edu:entitlement:pac12tv-mobile-access

We are registered with MACE here:

   https://www.internet2.edu/products-services/trust-identity/mace-registries/urnmace-namespace/


 	Andy