Changes between Version 35 and Version 36 of IamUaArp

Timestamp:

01/28/13 14:20:40 (12 years ago)

Author:

dabantz@…

Comment:

--

IamUaArp

@@ -21 +21 @@
  '''eduPersonAffiliation''' - one or more of the following: Student, Employee, Staff, Faculty, Member, or Affiliate. Member designates a person who is part of the University of Alaska and generally entitled to information services, even if not formally a student or employee; it includes campus-based researchers with external funding, faculty emeriti, and some others. Affiliate designates merely that the person has a record in the UA IdP, but is not automatically eligible for services, and may be used for those with a limited specific affiliation with UA such as short-term guests.
 
- '''eduPersonEntitlement''' - this designates permissions or entitlements based on your role(s) at UA, and may additionally be scoped to a department or (in the future) course. For example: for a student in Chemistry at UAF-main campus, learner@urn:mace:alaska.edu:itunesu:UAF - Main Campus:Chemistry
+ '''eduPersonEntitlement''' - permissions or entitlements based on your role(s) at UA; may additionally be scoped to a department or (in the future) course. For example: for a student in Chemistry at UAF-main campus, learner@urn:mace:alaska.edu:itunesu:UAF - Main Campus:Chemistry
+
+ '''eduPersonInstitutionalMail''' - An email address assigned to the individual in the alaska.edu domain,  Distinguished from email by requirement of UA domain ("!...@alaska.edu") and from EPPN and eduPersonUnique ID in that it is intended for use by services to send email to users within the domain: delivery (directly, via email routing, or via forward) to a mailbox under control of the user.  [''in draft awaiting formal approval from standards body'']
 
  '''EPPN''' (eduPersonPrincipalName) - A unique identifier comprised of your UA username followed by "@alaska.edu"; while it has the look of an email address, it does not signify that this is a valid email address or your preferred email address; example: !jpjones3@alaska.edu.
 
  '''eduPersonTargetedID''' - An opaque identifier unique to the combination of the authenticated person and the application; because it is different for each application, and does not itself reveal the identity of the user, it enables the application to track preferences or make bookmarks for the user, but does not enable that use information to be correlated with use in other applications or to a real person; example: 84e411ea-7daa-4a57-bbf6-b5cc52981b73
+
+ '''eduPersonUniqueID''' -  A non-changing unique identifier - specifically, not changing upon change of name or role at UA - scoped to alaska.edu; syntax is UA ID#@alaska.edu; example: !30123456@alaska.edu.  [''in draft awaiting formal approval from standards body'']
 
 '''email''' - an email address indicated as your preferred email address in the UA Enterprise Directory; it may or may not be an @alaska.edu address; examples: !gene.kelly@alaska.edu, !peterq@arsc.edu
@@ -47 +51 @@
  '''UA ID#''' (bannerid or uaIdentifier)- the unique numeric identifier assigned to all employees and students ("employee ID#", "student ID#") commonly used for UA login and account ids; example: 30123456
 [=#uakPersonID]
- '''UA ID# scoped''' (uakPersonID) - unique identifier using UA ID# parallel to the name-based EPPN, but using the unchanging numeric ID # assigned to all students and employees; intended to substitute for EPPN when the Service Provider needs an unchanging identifier for each user; example: !30123456@alaska.edu
+ '''UA ID# scoped''' (uakPersonID) - see eduPersonUniqueID.  UA-defined unique identifier using UA ID# parallel to the name-based EPPN, but using the unchanging numeric ID # assigned to all students and employees; intended to substitute for EPPN when the Service Provider needs an unchanging identifier for each user; example: !30123456@alaska.edu
 
  '''[=#uausername UA Username]''' (uaSystemID) - the unique name-based identifier commonly used for UA login and account ids;  example: jpmorgan