...
To best understand these patterns, it is helpful to introduce the concept of a canonical person record. In a typical higher education Identity identity management system, one or more systems of record serves as an authoritative source of attributes about a person's specific affiliation with the institution. For example, the student system asserts the person's student role, but in general cannot say anything about any employment role the same person might have.
...