EduPerson Schema Attributes
Higher Ed Affiliations (eduPersonAffiliation)
Broad category describing the account holder's affiliation(s) with the university. A person can have more than one role (such as a student and an employee).
| Attribute Metadata | Details |
|---|---|
| Example(s) | staff, employee, student, member |
| OID | 1.3.6.1.4.1.5923.1.1.1.1 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.1.1.1 |
| Multi-Value | Yes |
| Format | UTF-8 String |
| Possible Values | faculty: A person recognized by Dean of Faculties or a department as a clinical or adjunct faculty member and/or a person holding a Texas A&M University System faculty position. staff: A person holding a Texas A&M University System staff position. student A person enrolled in courses or actively pursuing a degree. employee: A person employed by the Texas A&M University System. member: A member of the Texas A&M University community. affiliate: A person with whom the university has dealings. alum: A person who has been awarded a degree from Texas A&M University. |
| Source(s) | Workday, Student Information System, or relevant partner source; based on tamuEduPersonAffiliation |
| Security-Sensitive | No |
| Usage | Convey broad-category affiliation assertions between members of an identity federation |
| Suppression Allowed | N/A |
Resource Entitlement URNs (eduPersonEntitlement)
URNs denoting resources the account holder is authorized to use.
| Attribute Metadata | Details |
|---|---|
| Example(s) | urn:mace:tamu.edu:dept:cscn:googleapps:eligible |
| OID | 1.3.6.1.4.1.5923.1.1.1.7 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.1.1.7 |
| Multi-Value | Yes |
| Format | UTF-8 String |
| Possible Values | Texas A&M entitlement URNs are registered under the MACE Namespace. |
| Source(s) | Populated by rules provided by the resource owner |
| Security-Sensitive | Yes |
| Usage | Controlling access to a resource |
| Suppression Allowed | N/A |
Scoped Course Affiliations (eduCourseMember)
Role of account holder in a specific current semester course offering. Scoped course affiliations are provided only for enrolled students, instructors, and teaching assistants affiliated with courses taught at Texas A&M's College Station, Galveston or Qatar campuses, or admitted and enrolled students eligible to take a Math Placement Exam.
The current semester used to set and clear information in the Texas A&M Enterprise Directory includes all semesters with active sections, where an active section is defined as one where the current date is on or after the section start date and on or before the section end date.
| Attribute Metadata | Details |
|---|---|
| Example(s) | Instructor@urn:mace:tamu.edu:crs:cs:2016:fall:PHYS218509 |
| OID | 1.3.6.1.4.1.5923.1.6.1.2 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.6.1.2 |
| Multi-Value | Yes |
| Format | UTF-8 String |
| Possible Values | Left component: Learner (enrolled student role) Instructor (instructor of record role) Teaching Assistant (teaching assistant role) Right component (course offering URN): Texas A&M course offering URNs are registered under the MACE Namespace |
| Source(s) | Student Information System |
| Security-Sensitive | Yes |
| Usage | Shibboleth-enabled applications |
| Suppression Allowed | N/A |
Course Affiliation URNs (eduCourseOffering)
URNs denoting the current semester's course offerings with which the account holder is affiliated. If the account holder is eligible to take a Math Placement Exam, the URN for the Math Placement Exam will also be present. URNs are provided only for enrolled students, instructors, and teaching assistants affiliated with courses taught at Texas A&M's College Station, Galveston or Qatar campuses, or admitted and enrolled students eligible to take a Math Placement Exam.
| Attribute Metadata | Details |
|---|---|
| Example(s) | urn:mace:tamu.edu:crs:cs:2010:fall:PHYS218509, urn:mace:tamu.edu:crs:cs:::MPE3 |
| OID | 1.3.6.1.4.1.5923.1.6.1.1 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.6.1.1 |
| Multi-Value | Yes |
| Format | UTF-8 String |
| Possible Values | Texas A&M course offering URNs are registered under the MACE Namespace |
| Source(s) | Student Information System |
| Security-Sensitive | Yes |
| Usage | Shibboleth-enabled applications |
| Suppression Allowed | N/A |
ORCID Identifier (eduPersonOrcid)
Account holder's ORCID identifier. The ORCID is a persistent digital identifier that distinguishes the account holder from every other researcher.
See the ORCID website for more information.
| Attribute Metadata | Details |
|---|---|
| Example(s) | http://orcid.org/0000-0003-3691-8879 |
| OID | 1.3.6.1.4.1.5923.1.1.1.16 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.1.1.16 |
| Multi-Value | No |
| Format | UTF-8 String |
| Possible Values | The value is the account holder's ORCID, a unique identifer that complies with the International Standard Name Identifier (ISO 27729), prefixed with http://orcid.org/. |
| Source(s) | University Libraries |
| Security-Sensitive | No |
| Usage | Directory searches |
| Suppression Allowed | N/A |
Higher Ed Primary Affiliation (eduPersonPrimaryAffiliation)
Broad category describing the account holder's primary affiliation.
| Attribute Metadata | Details |
|---|---|
| Example(s) | staff, employee, student, member |
| OID | 1.3.6.1.4.1.5923.1.1.1.5 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.1.1.5 |
| Multi-Value | No |
| Format | UTF-8 String |
| Possible Values | faculty: A person recognized by Dean of Faculties or a department as a clinical or adjunct faculty member and/or a person holding a Texas A&M University System faculty position. staff: A person holding a Texas A&M University System staff position. student A person enrolled in courses or actively pursuing a degree. employee: A person employed by the Texas A&M University System. member: A member of the Texas A&M University community. affiliate: A person with whom the university has dealings. alum: A person who has been awarded a degree from Texas A&M University. |
| Source(s) | Workday, Student Information System, or relevant partner source; based on tamuEduPersonAffiliation |
| Security-Sensitive | No |
| Usage | Convey broad-category affiliation assertions between members of an identity federation |
| Suppression Allowed | N/A |
Primary Affiliation Assignment (eduPersonPrimaryAffiliation)
| Condition | Derived Role |
|---|---|
If eduPersonAffiliation is faculty AND tamuEduPersonAffiliation includes faculty:official OR employee:faculty | faculty |
If eduPersonAffiliation includes staff AND fullTime is Y | staff |
If eduPersonAffiliation includes student | student |
If eduPersonAffiliation includes employee | employee |
If eduPersonAffiliation includes member | member |
If eduPersonAffiliation includes alum | alum |
If eduPersonAffiliation includes affiliate | affiliate |
Higher Ed NetID (eduPersonPrincipalName)
The NetID (account login identifier) for inter-institutional authentication. This can be thought of as the account login scoped to the identity provider. For everyone in the directory, it is 'tamuEduPersonNetID@tamu.edu'. This value is also the Kerberos principal for the account holder. This is a human-friendly identifier for the account holder. NetIDs are revokable (account holders are allowed to switch to a different NetID).
| Attribute Metadata | Details |
|---|---|
| Example(s) | joe-college@tamu.edu |
| OID | 1.3.6.1.4.1.5923.1.1.1.6 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.1.1.6 |
| Multi-Value | No |
| Format | UTF-8 String |
| Possible Values | The values consist of a left and right component separated by an "@" sign. The left component is the entry's tamuEduPersonNetID value. The right component identifies the domain or scope. For all entries in the Texas A&M NetID system this is tamu.edu. |
| Source(s) | If NetID has not been activated, this attribute is not present, i.e. contains no value. If NetID has been activated, the attribute value is NetID@tamu.edu. |
| Security-Sensitive | No |
| Usage | Directory searches |
| Suppression Allowed | N/A |
Higher Ed Scoped Affiliations (eduPersonScopedAffiliation)
The account holder's affiliation (role) within the Texas A&M domain.
| Attribute Metadata | Details |
|---|---|
| Example(s) | staff@tamu.edu, employee@tamu.edu, student@tamu.edu |
| OID | 1.3.6.1.4.1.5923.1.1.1.9 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.1.1.9 |
| Multi-Value | Yes |
| Format | The values consist of a left and right component separated by an "@" sign. The left component is one of the values from the eduPersonAffiliation. The right component identifies the role's identity provider domain. For eduPersonScopedAffiliation, the syntax of the right component matches that used for the right component of the eduPersonPrincipalName value: tamu.edu. |
| Possible Values | faculty@tamu.edu, staff@tamu.edu, student@tamu.edu, employee@tamu.edu, member@tamu.edu, affiliate@tamu.edu, alum@tamu.edu |
| Source(s) | Every value in eduPersonAffiliation will have a corresponding value in eduPersonScopedAffiliation. |
| Security-Sensitive | No |
| Usage | Directory searches |
| Suppression Allowed | No |
Persistent Unique Identifier (eduPersonUniqueId)
A persistent unique identifier for inter-institutional use as a principal identifier or unique external key by applications. This identifier represents a specific person or account in the Texas A&M NetID system.
| Attribute Metadata | Details |
|---|---|
| Example(s) | 990000148@tamu.edu |
| OID | 1.3.6.1.4.1.5923.1.1.1.13 |
| URN | urn:oid:1.3.6.1.4.1.5923.1.1.1.13 |
| Multi-Value | No |
| Format | The values consist of a left and right component separated by an "@" sign. The left component is the entry's tamuEduPersonUIN value. The right component identifies the domain or scope. For all entries in the Texas A&M NetID system this is tamu.edu. |
| Possible Values | Any valid string |
| Source(s) | Workday, Student Information System, or relevant partner source |
| Security-Sensitive | No |
| Usage | Primary key for person/user objects |
| Suppression Allowed | N/A |