Shibboleth Attribute Release policy summary: Difference between revisions

From RavenWiki
Jump to navigationJump to search
mNo edit summary
(Updated to match reality)
Line 1: Line 1:
{{shib-project}}
{{shib-project}}


* '''Anonymous Identifier''' (eduPersonTargetedID), and '''Affiliation''' (eduPersonScopedAffiliation) with value ''member@cam.ac.uk'', released to any member of the UK federation or the University Federation.
* '''Anonymous Identifier''' (eduPersonTargetedID), '''Status''' (eduPersonScopedAffiliation), and '''eduPerson Principal Name (eduPersonPrincipalName)''' released to any SP that requests them.
* '''Entitlement''' (eduPersonEntitlement)
* '''Entitlement''' (eduPersonEntitlement):
** to '''the EduServ Shibboleth to Athens gateway'''
** to '''the EduServ Shibboleth to Athens gateway'''
*** values of ''cam#default0'' on behalf of anyone entitled to access Athens-protected electronic resources (in particular, members of lookup group [http://www.lookup.cam.ac.uk/group/100926 100926] who are not members of [http://www.lookup.cam.ac.uk/group/100925 100925])
*** values of ''cam#default0'' on behalf of anyone entitled to access Athens-protected electronic resources (in particular, members of lookup group [http://www.lookup.cam.ac.uk/group/100926 100926] who are not members of [http://www.lookup.cam.ac.uk/group/100925 100925])
Line 8: Line 8:
** to '''EDINA Film and Sound olnline'''
** to '''EDINA Film and Sound olnline'''
*** a value of ''urn:mace:ac.uk:sdss.ac.uk:entitlement:emol.sdss.ac.uk:restricted'' on behalf of anyone entitled to access 'medically restricted' material (in particular, members of lookup group [http://www.lookup.cam.ac.uk/group/100927 100927])
*** a value of ''urn:mace:ac.uk:sdss.ac.uk:entitlement:emol.sdss.ac.uk:restricted'' on behalf of anyone entitled to access 'medically restricted' material (in particular, members of lookup group [http://www.lookup.cam.ac.uk/group/100927 100927])
* '''Forename''' (givenName), '''Surname''' (sn), '''Registered Name''' (cn), '''Display Name''' (displayName), '''Institution''' (ou), '''E-mail''' (mail), '''lookup group''' (groupID)
** to '''CS Development server''' https://mnementh.csi.cam.ac.uk/shibboleth

Revision as of 09:53, 1 August 2007

ShibbolethLogoColorSmall.png
WARNING: This page is retained as a historical record but is out-of-date and is not being maintained.

This was a working document belonging to the Computing Service's Shibboleth Development Project. This project is complete (Raven now supports Shibboleth) and this document only remains for historical and reference purposes. Be aware that it is not being maintained and may be misleading if read out of context.
  • Anonymous Identifier (eduPersonTargetedID), Status (eduPersonScopedAffiliation), and eduPerson Principal Name (eduPersonPrincipalName) released to any SP that requests them.
  • Entitlement (eduPersonEntitlement):
    • to the EduServ Shibboleth to Athens gateway
      • values of cam#default0 on behalf of anyone entitled to access Athens-protected electronic resources (in particular, members of lookup group 100926 who are not members of 100925)
      • values of cam#aaemo on behalf of anyone entitled to access 'medically restricted' material (in particular, members of lookup group 100927 who are not members of 100925)
    • to EDINA Film and Sound olnline
  • Forename (givenName), Surname (sn), Registered Name (cn), Display Name (displayName), Institution (ou), E-mail (mail), lookup group (groupID)