<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 05/10/12 18:19, Cantor, Scott wrote:<br>
</div>
<blockquote
cite="mid:BA63CEAE152A7742B854C678D949138339A55D6C@CIO-KRC-D1MBX01.osuad.osu.edu"
type="cite">
<pre wrap="">On 10/5/12 12:03 PM, "Keith Carr" <a class="moz-txt-link-rfc2396E" href="mailto:kecarr@sgul.ac.uk"><kecarr@sgul.ac.uk></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I have been told by the technical staff at an SP that the reason they
are having trouble authenticating our users is that our IdP provides
eduPerson attributes are at the "member" level while their SP checks
attributes at the "institute" level.
Can somebody explain what the difference is or point me to an article
which explains the difference?
</pre>
</blockquote>
<pre wrap="">
That's not terminology that is particularly familiar to the software. The
only thing that comes to mind is using eduPersonScopedAffiliation values
that look like <a class="moz-txt-link-abbreviated" href="mailto:member@dept.univ.edu">member@dept.univ.edu</a> instead of <a class="moz-txt-link-abbreviated" href="mailto:member@univ.edu">member@univ.edu</a>?
-- Scott</pre>
</blockquote>
That's what occurred to me also - I have never heard these terms.<br>
<br>
The explanation that I was further given (not much of an
explanation) was:-<br>
<div dir="ltr" align="left"><span class="136145309-18092012"><font
color="#0000ff" face="Arial" size="2"><br>
" NPG has an agreement with the UK Federation, and has a list
of all members - meaning that as a provider, we trust all
members.</font></span></div>
<div dir="ltr" align="left"><span class="136145309-18092012"></span>
<span class="136145309-18092012"><font color="#0000ff"
face="Arial" size="2">Our software is set up to recognise a
user's attributes on an institutional level ie. 'does the user
belong to an institute which is part of the Federation?'</font></span></div>
<div dir="ltr" align="left"><span class="136145309-18092012"></span>
<span class="136145309-18092012"><font color="#0000ff"
face="Arial" size="2">SGUL's attributes are set at a level
below this - so we need to change our system to check for
attributes on a member (of an institution) level ie. 'is the
user a member of X University?' And then 'is X university part
of the UK Federation'?"<br>
<br>
<br>
</font></span></div>
We are part of the the UK Federation and so the explanation does not
seem to make much sense? If it also does not make much sense to
anybody else then I will go back to the publisher and take umbrage
with them.<br>
<br>
Thanks, Keith<br>
<blockquote
cite="mid:BA63CEAE152A7742B854C678D949138339A55D6C@CIO-KRC-D1MBX01.osuad.osu.edu"
type="cite">
<pre wrap="">
--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
</blockquote>
<br>
</body>
</html>