...
| Information | Description | Example | stored in/mapped to (internally) |
|---|---|---|---|
| Technical contact |
| support@it.geant.org | contacts['technical'] |
| Support contact | "Generic" support questions for the actual service
Usually the application administrators or the teams that run it. | support@it.geant.org | contacts['support'] |
| Service name | Very short name to be shown in user interfaces. | GÉANT Wiki | name (en) |
| Service description | Longer descriptive text, for instance with details like:
Can contain URLs | Atlassian Confluence wiki, production instance. | description (en) |
| Service URL | The actual URL to the main service | https://wiki.geant.org | url (en) |
| Metadata | Valid SAML2.0 metadata | a URL to the XML metadata (preferred), or an XML metadata file. |
...
The SAML proxy will always provide the following attributes to its downstream services:
FIXME: Do we send OID only? Or OID+name?
| SAML attribute | example value | remarks |
|---|---|---|
| uid | federated-user-1234 | Unique user ID, always available. |
| user@domain | Defaults to the string 'invalid_email_needs_updating' if none was provided by the upstream IdP | |
| displayName | Robert Wagner | Defaults to the string 'first_name last_name' or similar if bit aren't provided by the upstream IdP |
| isMemberOf |
| Multivalued attribute listing the CAMS group memberships. |
...