Starting Points

SWAMID Inside

Getting Started
News
Events
Contact

Navigation

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expected attribute release

Attribute(s)OIDComment
transientId SAML2 session user identifier.
eduPersonTargetedID1.3.6.1.4.1.5923.1.1.1.10 
eduPersonPrincipalName1.3.6.1.4.1.5923.1.1.1.6 
mail0.9.2342.19200300.100.1.3Can be more than one address released but Identity Providers are recommended to release only one.
displayName and/or givenName and sn

2.16.840.1.113730.3.1.241,
2.5.4.42, 2.5.4.4

A user's name can be released in different ways and it's recommended that the Service Provider can handle this.
eduPersonScopedAffiliation1.3.6.1.4.1.5923.1.1.1.9 

...

Expected minimal attribute availability for release (only if required)

Attribute(s)OIDComment
transientId SAML2 session user identifier.
eduPersonTargetedID1.3.6.1.4.1.5923.1.1.1.10Only if required in Service Provider metadata!
eduPersonPrincipalName1.3.6.1.4.1.5923.1.1.1.6Only if required in Service Provider metadata!
mail0.9.2342.19200300.100.1.3Only if required in Service Provider metadata! Can be more than one address released but Identity Providers are recommended to release only one.
displayName and/or cn

2.16.840.1.113730.3.1.241,
2.5.4.3

Only if required in Service Provider metadata! A user's name can be released in different ways and it's recommended that the Service Provider can handle this.
eduPersonScopedAffiliation1.3.6.1.4.1.5923.1.1.1.9Only if required in Service Provider metadata!
schacHomeOrganization1.3.6.1.4.1.25178.1.2.9Only if required in Service Provider metadata!
schacHomeOrganizationType1.3.6.1.4.1.25178.1.2.10Only if required in Service Provider metadata!

...

Expected attribute release when paired with a SWAMID Data Protection Entity Category

Attribute(s)OIDComment
transientId SAML2 session user identifier.
eduPersonTargetedID1.3.6.1.4.1.5923.1.1.1.10 
eduPersonAssurance1.3.6.1.4.1.5923.1.1.1.11One or more Assurance Profiles for the user if it is defined, please see "3.3 Configure Shibboleth SP - Check for Identity Assurance or REFEDS SIRTFI" for more information.
eduPersonPrincipalName1.3.6.1.4.1.5923.1.1.1.6 
mail0.9.2342.19200300.100.1.3Can be more than one address released but Identity Providers are recommended to release only one.
displayName, cn and/or givenName and sn

2.16.840.1.113730.3.1.241,
2.5.4.3, 2.5.4.42, 2.5.4.4

A user's name can be released in different ways and it's recommended that the Service Provider can handle this.
eduPersonScopedAffiliation1.3.6.1.4.1.5923.1.1.1.9 
o2.5.4.10 
norEduOrgAcronym1.3.6.1.4.1.2428.90.1.6 
c2.5.4.6 
co0.9.2342.19200300.100.1.43 
schacHomeOrganization1.3.6.1.4.1.25178.1.2.9 

...

Expected attribute release

AttributeOIDComment
transientId SAML2 session user identifier.
eduPersonTargetedID1.3.6.1.4.1.5923.1.1.1.10 
eduPersonAssurance1.3.6.1.4.1.5923.1.1.1.11One or more Assurance Profiles for the user if it is defined, please see "3.3 Configure Shibboleth SP - Check for Identity Assurance or REFEDS SIRTFI" for more information.
norEduPersonNIN1.3.6.1.4.1.2428.90.1.5Swedish goverment Personal Identity Number, Swedish goverment temporary Co-ordination number or Swedish National Admission system interim identity number.

...

Most Identity Providers within SWAMID sends the per Service Provider unique user identifier eduPersonTargetedID (OID 1.3.6.1.4.1.5923.1.1.1.10)  to and the SAML2 per session session user identifier transientId to all Service Providers.