Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: no ePE

...

Friendly nameFormal attribute nameDescription
givenNameurn:oid:2.5.4.42First name
snurn:oid:2.5.4.4Last name
displayNameurn:oid:2.16.840.1.113730.3.1.241"Firstname Lastname" (without the quotes)
mailurn:oid:0.9.2342.19200300.100.1.3The email address used for verification emails during account creation
eduPersonPrincipalNameurn:oid:1.3.6.1.4.1.5923.1.1.1.6Always of the form [a-z0-9]{7}@openidp.aco.net, i.e. seven (random) lower-case characters and/or digits + "@openidp.aco.net".
The string is "random" only during account creation; after that the created eduPersonPrincipalName value will not change for a given registration. Also, eduPersonPrincipalName values will not be re-used or re-assigned from one person to another at the OpenIDP.
eduPersonEntitlement
(only in few cases) 
urn:oid:1.3.6.1.4.1.5923.1.1.1.7

For application owners the OpenIDP allows the provisioning of entitlement values via a proprietary API. E.g. after the u:book support team (see below) has verified someone's identity and eligibility ("studentness") status, they are able to store that fact in an entitlement specific to their services, e.g. https://guests.ubook.at to express the fact that someone should be entitled to use the services u:book brokers.
ACOnet currently has no plans to expand use of this API, so this should be considered a legacy service.

Services known to accept ACOnet OpenIDP identities

...