...
| Info |
|---|
This policy is relevant to both LDAP and CAS and is informative for our Shibboleth Identity Provider service. |
Table of Contents
| Table of Contents | ||
|---|---|---|
|
Overview
Starting with version 3, CAS supports an attribute release policy. An attribute release policy allows for the release of additional information upon a successful authentication. This additional information may be used by the application to determine if a person who has successfully authenticated is also authorized to use one or more of the application's features.
...
| Warning |
|---|
Requests to release attributes to 3rd-party agents, such as hosted services, will ALWAYS require a Data Governance Data Sharing Process (DSRDGP) Request approval before IAM can complete the request. See the Data Governance link below for the DSR DGP form and request process. |
...
Specifically, UHIMS authorization services such as CAS and Shibboleth release attributes that a post-2012 revision of E2.214 will define attributes defined as "restricted." These services are, therefore, subject to UH Data Governance practices as defined by the UH Data Governance Committee. For more information:
...
| Warning |
|---|
ITS reserves the right to periodically add new attributes to LDAP and CAS. Developers should anticipate this possibility when integrating apps with CAS. |
| Attribute | Attribute notes/description | Available |
|---|---|---|
| UH Username | from the start | |
| UH Number | from the start | |
| First Name | from the start | |
| Last Name | from the start | |
| Common Name (aka the official Full Name) | from the start | |
Display Name (perhaps a more common nickname, otherwise same as cn, may not be available) | from the start | |
| Affiliation (User may have multiple affiliations.) | from the start | |
| Organization (User may have multiple organizations.) | from the start | |
| eduPersonPrincipalName | Globally unique identifier | since Oct 30, 2016 |
| UH Affiliation (combines both Affiliation and Organization, and again the user may have multiple affiliations.) | from the start | |
| Primary/Home Campus (also includes related attributes) | since Oct 30, 2016 | |
| UH Bargaining Unit | since Aug 15, 2017 | |
Office FAX Number | since Oct 8, 2014 | |
Personal Home Page URI | since Oct 8, 2014 | |
| UH Official Email (single value); always a hawaii.edu address. | since Oct 30, 2016 | |
| Email (multi-valued) | since Oct 8, 2014 | |
Department Name | since Oct 8, 2014 | |
Office Location | since Oct 8, 2014 | |
Office Telephone Number | since Oct 8, 2014 | |
Job Title | since Oct 8, 2014 | |
UH Acknowledgement (see ACER for more information) | since Oct 8, 2014 | |
| UH Released Grouping Memberships (see UH Groupings for more information) | since Oct 30, 2016 |
More information on how CAS information gets updated
...