This policy is relevant to both LDAP and CAS.
Table of Contents
Overview
Starting with version 3, CAS supports an attribute release policy. An attribute release policy allows for the release of additional information upon a successful authentication. This additional information may be used by the application to determine if a person is authorized to use one or more of the application's features.
Data Governance Warning
Requests to release attributes to 3rd-party agents, such as hosted services, will ALWAYS require a Data Governance Data Sharing (DSR) Request approval before IAM can complete the request. See the Data Governance link below for the DSR form and request process.
Use of CAS is subject to the following executive policies and procedures:
- E2.214, Security and Protection of Sensitive Information
- E2.215, Institutional Data Governance
- AP 7.022, Procedures Related to Protection of the Educational Rights and Privacy of Students
Specifically, UHIMS authorization services such as CAS and Shibboleth release attributes that a post-2012 revision of E2.214 will define as "restricted." These services are, therefore, subject to UH Data Governance practices as defined by the UH Data Governance Committee. For more information:
CAS Default Attribute Release Policy
ITS reserves the right to periodically add new attributes to LDAP and CAS. Developers should anticipate this possibility when integrating apps with CAS.
| Attribute | Attribute notes/description | Available |
|---|---|---|
| UH Username | from the start | |
| UH Number | from the start | |
| First Name | from the start | |
| Last Name | from the start | |
| Common Name (aka the official Full Name) | from the start | |
Display Name (perhaps a more common nickname, otherwise same as cn, may not be available) | from the start | |
| Affiliation (User may have multiple affiliations.) | from the start | |
| Organization (User may have multiple organizations.) | from the start | |
| eduPersonPrincipalName | Globally unique identifier | since Oct 30, 2016 |
| UH Affiliation (combines both Affiliation and Organization, and again the user may have multiple affiliations.) | from the start | |
| Primary/Home Campus (also includes related attributes) | since Oct 30, 2016 | |
| UH Bargaining Unit | since Aug 15, 2017 | |
Office FAX Number | since Oct 8, 2014 | |
Personal Home Page URI | since Oct 8, 2014 | |
| UH Official Email (single value); always a hawaii.edu address. | since Oct 30, 2016 | |
| Email (multi-valued) | since Oct 8, 2014 | |
Department Name | since Oct 8, 2014 | |
Office Location | since Oct 8, 2014 | |
Office Telephone Number | since Oct 8, 2014 | |
Job Title | since Oct 8, 2014 | |
UH Acknowledgement (see ACER for more information) | since Oct 8, 2014 | |
| UH Released Grouping Memberships (see UH Groupings for more information) | since Oct 30, 2016 |
More information on how CAS information gets updated