A scoped identifier for a person. It should be represented in the form "user@scope" where "user" is a name-based identifier for the person and where the "scope" portion MUST be the administrative domain of the identity system where the identifier was created and assigned. http://macedir.org/specs/eduperson/#eduPersonPrincipalName