eduPersonEntitlement
eduPersonEntitlement specifies the person's rights to specific resources in the form of one or more Uniform Resource Identifiers (URI).
Permissible Values
Any valid URI (either URN or URL).
Standard URN format
- urn:mace:ucla.edu:permission:<system_domain>:<function>:<constraint>
Current values
- urn:mace:ucla.edu:permission:housing:paybill:700987654
- urn:mace:ucla.edu:permission:gartner:core
- urn:mace:ucla.edu:permission:gartner:burtonIT1
- urn:mace:ucla.edu:permission:traveler
- urn:mace:ucla.edu:permission:recruit:enter
- urn:mace:ucla.edu:permission:bol:proxy - Chris Stromsoe
- urn:mace:ucla.edu:permission:bol:software - Chris Stromsoe
- urn:mace:ucla.edu:permission:bol:webspace - Chris Stromsoe
- urn:mace:ucla.edu:permission:learnit.ucla.edu
- urn:mace:ucla.edu:permission:sar:preparer
Remark
The entitlement URI definition is negotiated within a federation or between specific service provider and the identity provider. For additional information on the use of this attribute, please contact Albert Wu.
Release Policy
UCLA does not by default release this attribute to service providers. Each service provider is required to submit a request for data access and is subject to data privacy review from campus data stewards.
For additional information, please contact Albert Wu.
See Also
The Official eduPerson Object Class Definition
Usage
This is the usage of this attribute in the attribute-map.xml file. For more information about Mapping the attribute please visit Shibboleth wiki.
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="SHIBEPENTITLEMENT"/>