Child pages
  • eduPersonEntitlement

eduPersonEntitlement

eduPersonEntitlement specifies the person's rights to specific resources in the form of one or more Uniform Resource Identifiers (URI).

Permissible Values

Any valid URI (either URN or URL).

Standard URN format

  • urn:mace:ucla.edu:permission:<system_domain>:<function>:<constraint>

Current values

  • urn:mace:ucla.edu:permission:housing:paybill:700987654
  • urn:mace:ucla.edu:permission:gartner:core
  • urn:mace:ucla.edu:permission:gartner:burtonIT1
  • urn:mace:ucla.edu:permission:traveler
  • urn:mace:ucla.edu:permission:recruit:enter
  • urn:mace:ucla.edu:permission:bol:proxy - Chris Stromsoe
  • urn:mace:ucla.edu:permission:bol:software - Chris Stromsoe
  • urn:mace:ucla.edu:permission:bol:webspace - Chris Stromsoe
  • urn:mace:ucla.edu:permission:learnit.ucla.edu
  • urn:mace:ucla.edu:permission:sar:preparer

Remark

The entitlement URI definition is negotiated within a federation or between specific service provider and the identity provider. For additional information on the use of this attribute, please contact Albert Wu.

Release Policy

UCLA does not by default release this attribute to service providers. Each service provider is required to submit a request for data access and is subject to data privacy review from campus data stewards.

For additional information, please contact Albert Wu.

See Also

The Official eduPerson Object Class Definition

Usage

This is the usage of this attribute in the attribute-map.xml file. For more information about Mapping the attribute please visit Shibboleth wiki.

      <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" id="SHIBEPENTITLEMENT"/>