eduPersonOrgDN is the distinguished name (DN) of the directory entry representing the institution with which the person is associated.
The directory entry pointed to by this dn should be represented in the X.521(2001) "organization" object class.
This attribute is primarily meant for systems with direct access to the Enterprise Directory to do an efficient lookup to find out more about the organization with which the person is associated. Shibboleth Service Providers will not likely find this attribute useful.
UCLA does not by default release this attribute to service providers. Each service provider is required to submit a request for data access and is subject to data privacy review from campus data stewards.
For additional information, please contact Albert Wu
This is the usage of this attribute in the AAP.xml file. For more information about AAP configuration please visit AAP Configuration.
<AttributeRule Name="urn:mace:dir:attribute-def:eduPersonOrgDN" Header="SHIBEPORGDN"> <AnySite> <AnyValue/> </AnySite> </AttributeRule>