eduPersonEntitlement Format

[Brian Moon]

Interesting.  We're also setting up Compcast/Xfinity, and the value they
take was totally customizable by us.

Given that you have both in your environment, is one of them the standard
that you prefer?  If so, would you chose that same one if you were building
the environment new today?

Thanks!


Brian Moon
Senior System Administrator
Enterprise Systems
Santa Clara University
Office: 408.554.4830
bmoon at scu.edu

On Mon, Apr 3, 2017 at 3:51 PM, Andrew Morgan <morgan at orst.edu> wrote:

> On Mon, 3 Apr 2017, Brian Moon wrote:
>
> Hello all,
>>
>> We are currently setting up our Shibboleth environment and just recently
>> extended our schema to include eduPerson attributes.  One question that
>> has
>> come up, though, is how we want to format the values in the
>> eduPersonEntitlement field.  From reading about it, the impression I'm
>> getting is that the recommendation today is to set it to a URL somewhere
>> within our domain.  For those of you who use a URL, do you have it resolve
>> to a page that actually exists?  If so, what content do you recommend
>> putting on that page?  And who would actually see this information?
>>
>> For those of you who do not use a URL, what do you use instead?
>>
>> Thanks!
>> Brian
>>
>
> Brian,
>
> We actually use both URL and URN formats in Shibboleth.
>
> Comcast/Xfinity asked us to send the following URL value:
>
>   http://www.xfinityoncampus.com/xoc-access
>
> For our Pac-12 TV integration, we worked with the vendor to settle on this
> value in our MACE namespace:
>
>   urn:mace:oregonstate.edu:entitlement:pac12tv-mobile-access
>
> We are registered with MACE here:
>
>   https://www.internet2.edu/products-services/trust-identity/
> mace-registries/urnmace-namespace/
>
>
>         Andy
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170403/6d561fe6/attachment.html>