eduPersonAffiliation specifies the person's relationship(s) to the institution in broad categories such as student, faculty, staff, alum, etc. (See permissible values).
eduPersonAffiliation is a multi-valued string attribute. The UCLA identity provider asserts the following possible values within this attribute:
Note: In addition to the above values, the eduPerson object class defines the following additional values:
"member" is intended to include faculty, staff, and student with a basic set of privileges that go with membership in the university community (e.g., they are given institutional email and calendar accounts). It could be glossed as "member in good standing of the university community."
"affiliate" is intended to apply to people with whom the university has dealings, but to whom no general set of "community membership" privileges are extended.
UCLA currently only assert "student", "employee", and "member" values in eduPersonAffiliation. A person's entry could have the following values in eduPersonAffiliation depending on his/her relationship with UCLA:
student: "student", "member"
employee: "employee", "member"
student and employee: "student", "employee", "member"
contractor, visiting scholar, ASUCLA employee, university extension student, and everyone else: none
eduPersonAffiliation is also populated with the value "affiliate", currently serving as an intermittent value for correcting a mistake in asserting eduPersonAffiliation values via UCLA Shib IDP. This value is not reliable, and should not be used in anyway for new SPs.
While there are certainly other possible affiliation values, to comply with the eduPerson definition, UCLA will assert additional affiliation values in a UCLA-specific affiliation attribute.
UCLA does not by default release this attribute to service providers. Each service provider is required to submit a request for data access and is subject to data privacy review from campus data stewards.
For additional information, please contact Albert Wu.
This is the usage of this attribute in the attribute-map.xml file. For more information about Mapping the attribute please visit Shibboleth wiki.