...
urn:x-perun:baz-collaboration.foo-service.bar-value@perun.org
https://cern.ch/unifocaltelescope/admin@perun.cz
urn:REGISTERED_NAMESPACE:[auth source]:{target
...
}:{service}:{[entitlementName]}:[entitlementValue]@perun.org
Benefits:
can use any URIs in the “local-part”, thus existing eduPersonEntitlement values as well
scope can be verified by using existing code in Shibboleth&SimpleSAMLphp. They can also handle multiple occurrence of the delimiter character.
...