Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

SAML2 Attribute IdentifierFriendly NameWithout enitity categoryREFEDS CoCo v2 and GÉANT CoCo v1REFEDS Personalized Access Entity CategoryREFEDS Pseudonymous Authorization Entity CategoryREFEDS Anonymous Authorization Entity CategorySWAMID R&E

SWAMID SFS-1993-1153





Note
titleRestriction

Attribute released "only if requested and required" in metadata1.

Note that norEduPersonNIN and personalIdentityNumber has additional restrictions2.






Warning
titleDeprecated

No new EntityID will be permitted to use this category from 2020-09-01.



Warning
titleDeprecated

No new EntityID will be permitted to use this category from 2020-09-01.


urn:oasis:names:tc:SAML:attribute:pairwise-idpairwise-id


x


urn:oasis:names:tc:SAML:attribute:subject-idsubject-id

x



urn:oid:1.3.6.1.4.1.5923.1.1.1.10eduPersonTargetedID
o




urn:oid:1.3.6.1.4.1.5923.1.1.1.6eduPersonPrincipalName
o


x
urn:oid:1.3.6.1.4.1.5923.1.1.1.16eduPersonOrcid
o




urn:oid:1.3.6.1.4.1.2428.90.1.5norEduPersonNIN
o2



x
urn:oid:1.2.752.29.4.13personalIdentityNumber
o2




urn:oid:1.3.6.1.4.1.25178.1.2.3 schacDateOfBirth
o




urn:oid:0.9.2342.19200300.100.1.3mail
ox

x
urn:oid:2.16.840.1.113730.3.1.241displayName
ox

x
urn:oid:2.5.4.3cn (aka commonName)
o


x
urn:oid:2.5.4.42givenName
ox

x
urn:oid:2.5.4.4sn (aka surname)
ox

x
urn:oid:1.3.6.1.4.1.5923.1.1.1.11eduPersonAssurance
ox

xx
urn:oid:1.3.6.1.4.1.5923.1.1.1.9eduPersonScopedAffiliation
oxxxx
urn:oid:1.3.6.1.4.1.5923.1.1.1.1eduPersonAffiliation
o




urn:oid:2.5.4.10o (aka organizationName)
o


x
urn:oid:1.3.6.1.4.1.2428.90.1.6norEduOrgAcronym
o


x
urn:oid:2.5.4.6c (aka countryName)
o


x
urn:oid:0.9.2342.19200300.100.1.43co (aka friendlyCountryName)
o


x
urn:oid:1.3.6.1.4.1.25178.1.2.9schacHomeOrganization
oxxxx
urn:oid:1.3.6.1.4.1.25178.1.2.10schacHomeOrganizationType
o





  1. The entity category the REFEDS and GÉANT Code of Conduct entity categories does not have a specific attribute bundle. Instead of an attribute bundle it uses attribute request in metadata for specific required attributes.
  2. norEduPersonNIN and personalIdentityNumber shall only be released when required by entities registered with in SWAMID (registrationAuthority="http://www.swamid.se/").
    • personalIdentityNumber must only contain Swedish Personal Numbers or Swedish Co-ordination Numbers.
    • norEduPersonNIN can besides  Swedish Personal Numbers and Swedish Co-ordination Numbers also contain Interim Personal Numbers from the student documentation system Ladok and the Swedish national study enrolment system.
  3. eduPersonTargetedID should only be released in with the entity category REFEDS Research & Scholarship if eduPersonPrincipalName is reassignable. All Identity Providers in SWAMID must by the SWAMID Assurance Profiles be lonterm longterm unique and therefore it should normally not noramlly be released.

URI for all entity categories used within SWAMID

...