<html><body><div dir="ltr">I haven’t been paying enough attention to OpenAthens. I just realized there is an OpenAthens federated identity provider from a for-profit organization with an entity ID and scope referring to my institution. That seems to mean that consumers of information from the OpenAthens IdP may conclude, informally from the entity ID, and more correctly based on the scope, that the assertion is about a member of my institution. As I say, I haven’t paid enough attention to OpenAthens, so maybe I need some ’splaining, but this seems to me wrong on many levels. Is it? How concerned should I be?<div><br></div><div dir="ltr"><span style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal"><md:EntityDescriptor </span><span class="html-attribute" style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal">… </span><span class="html-attribute" style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal"><span class="html-attribute-name">entityID</span>="<span class="html-attribute-value"><a href="https://idp.alaska.edu/openathens">https://idp.alaska.edu/openathens</a></span>”</span><span style="color:rgb(136,18,128);font-family:monospace;font-variant-ligatures:normal">></span></div><div dir="ltr"><div style="orphans: 2; widows: 2;" dir="ltr"><font color="#881280" face="monospace"><span style="">…<</span></font><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal">shibmd:Scope<span class="html-attribute"> <span class="html-attribute-name">regexp</span>=“<span class="html-attribute-value">false</span>"</span>></span><span style="font-family:monospace;font-variant-ligatures:normal"><a href="http://alaska.edu">alaska.edu</a></span><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal"></shibmd:Scope></span></div><div style="orphans: 2; widows: 2;" dir="ltr"><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal"><br></span></div><div style="orphans: 2; widows: 2;" dir="ltr"><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal"><span style="color:rgb(136,18,128);font-variant-ligatures:normal"><EntityDescriptor</span><span class="html-attribute" style="color:rgb(136,18,128);font-variant-ligatures:normal"> … </span><span class="html-attribute" style="color:rgb(136,18,128);font-variant-ligatures:normal"><span class="html-attribute-name">entityID</span>="<span class="html-attribute-value">urn:mace:incommon:<a href="http://alaska.edu">alaska.edu</a></span>"</span><span style="color:rgb(136,18,128);font-variant-ligatures:normal">></span><br></span></div><div dir="ltr">… <span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal"><shibmd:Scope<span class="html-attribute"> <span class="html-attribute-name">regexp</span>="<span class="html-attribute-value">false</span>"</span>></span><span style="font-family:monospace;font-variant-ligatures:normal"><a href="http://alaska.edu">alaska.edu</a></span><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal"></shibmd:Scope></span></div><div dir="ltr"><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal"><br></span></div><div dir="ltr"><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal">David St. Pierre Bantz</span></div><div dir="ltr"><span class="html-tag" style="font-family:monospace;font-variant-ligatures:normal">University of Alaska (<a href="http://alaska.edu">alaska.edu</a> !)</span></div></div></div></body></html>