Getting Started

• Read me first: introducing-user-data
• Choosing the right user identifiers
• Handling data exchange in SAML

Streamline access with entity categories

• What is an entity category?

• REFEDS Research & Scholarship entity category

• <future>REFEDS Authentication Only entity category</>

• <future>REFEDS Anonymous Authorization entity category</>

• <future>REFEDS Pseudonymous Authorization entity category</> 

References and additional reading

• eduPerson LDAP Object Class schema
• SAML v2.0 Subject Identifier Attributes Profile Version 1.0
• <future> Attributes vs "claims" (for the Microsoft / OIDC etc. camp)
• <future> Privacy considerations
• <future> Negotiating data release
• <future> Consent?

Attributes (supported?) in InCommon

Person identifiers

• SAML General Purpose Subject Identifier (subject-id)
• SAML Pairwise Subject Identifier (pairwise-id)
• eduPersonPrincipalName (eppn)
• eduPersonTargetedID (eptid) -deprecated-
• user-attr-epuid

Person characteristics and contacts

• user-attr-cn
• user-attr-displayname
• user-attr-givenname
• user-attr-sn
• Email address (mail)

Authorization support information

• eduPersonOrgDN
• user-attr-edupersonaffiliation
• user-attr-edupersonscopedaffiliation
• user-attr-edupersonentitlement
• memberOf
• isMemberOf