...
Within higher education, and thus within InCommon, there are two principal mechanisms for user identification profiled for use with SAML: the eduPersonPrincipalName (EPPN) and eduPersonTargetedID attributes.
| Tip |
|---|
| title | Best Recommended Practice |
|---|
|
- The IdPs support the eduPersonPrincipalName and eduPersonTargetedID attributes are supported.
- When SAML 2.0 is used, the "persistent"
<NameID> format is used to represent the eduPersonTargetedID attribute. - The release of eduPersonTargetedID is automated for most or all affiliates (save perhaps for students opting out under FERPA) to SPs that are not otherwise subject to user anonymity requirements, such as some library services.
|
...