EPPN Case Sensitivity?

[Matthew Slowe]

On 2022-07-27 15:47, Peter Smith wrote:
> Our Shibboleth IDP in my experience has always lower-cased our EPPN 
> attribute.  Are there any documented requirements for case sensitivity 
> (or insensitivity) of EPPN for IDPs and for SPs?  I believe EPPN is 
> already required to be unique within an organization, so I don't see 
> case sensitivity being useful at all.

The REFEDS eduPerson 2020 specification defines eduPersonPrincipalName 
(more explicitly "1.3.6.1.4.1.1466.115.121.1.15") as being case 
insensitive ("EQUALITY caseIgnoreMatch").

Services that do not treat it as such are broken.

I'll get down from my tower now...

-- 
Matthew Slowe [he/him] (GPG: 0x6BE0CF7D04600314)
Senior Technical Consultant and Support specialist, Jisc
Team: 0300 300 2212, option 2
Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG