Versions Compared

Old Version 6

changes.mady.by.user Christos Kanellopoulos

Saved on

compared with

New Version 7

changes.mady.by.user Christos Kanellopoulos

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The following attributes are requested:

AttributeExplanation

Any of:

  • Persistent NameID
  • eduPersonPrincipalName1
  • eduPersonTargetedID
  • eduPersonUniqueId
  • eduPersonOrcid
  • subject-id
  • pairwise-id
The services requires to uniquely identify users throughout the student mobility process. Without some kind of unique identifier, it is not possible to distinguish between two different users.
eduPersonAssuranceThe eduPersonAssurance attribute is required in the case an IdP releases only eduPersonPrincipalName as an identifier and the IdP does not support the Research and Scholarship entity category. In this case, if eduPersonArrusance has a value of value of https://refeds.org/assurance/ID/eppn-unique-no-reassign, in order to be able to use eduPersonPrincipalName as an identifier.

Any of:

  • cn
  • displayName
  • sn + givenName
The Erasmus process needs to know the name of the person participating in the student mobility process.

mail

The service needs to be able to contact the user regarding the status of student mobility process.
schacPersonalUniqueCode

The student mobility processes require the use of a number of services, all of which are involved in different stages of the pipeline and which will need to be able to exchange data about the students who are in mobility. The European Student Identifier (ESI) is globally unique, persistent, non-targeted, protocol neutral and data transport neutral. In SAML, the ESI is transported in the schacPersonaUniqueCode attribute (as defined in the SCHema for Academia). Currently support for the ESI is being rolled out in Higher Education Institutions around Europe. If your HEI, already supports the ESI, you can release it to the ERASMUS SP Proxy using this attribute.

schacHomeOrganizationThe student mobility processes need the to identify the Home Institution from which the user is coming from.

eduPersonScopedAffiliation

The student mobility processes rely on authorising access to users based on the affiliation of their members in their home organisation.


1: The eduPersonPrincipalName can be used only if one of the following conditions are met: i) the IdP supports the R&S Enitity Category, ii) the eduPersonAssurance attribute is also released and it has a value of https://refeds.org/assurance/ID/eppn-unique-no-reassign, iii) the federation in which the IdP has registered has a policy that prohibits the reassignment of the value of the eduPersonPrincipalName attribute