skip to main content

Directory Services Attribute

Higher Ed Scoped Affiliations (eduPersonScopedAffiliation)

Attribute details

LDAP eduPersonScopedAffiliation attribute properties, usage and population rules
Definition: The account holder's affiliation (role) within the Texas A&M Identity Provider's domain.
Attribute Name: 'eduPersonScopedAffiliation'
OID: 1.3.6.1.4.1.5923.1.1.1.9
URN: urn:oid:1.3.6.1.4.1.5923.1.1.1.9
Multiple Values: Multi-valued
Format: Directory String
The values consist of a left and right component separated by an "@" sign. The left component is one of the values from the eduPersonAffiliation controlled vocabulary. The right component identifies the role's identity provider domain. For eduPersonScopedAffiliation, the syntax of the right component matches that used for the right component of the eduPersonPrincipalName value, "tamu.edu".
Search Syntax: EQUALITY caseIgnoreMatch
Controlled Vocabulary: faculty@tamu.edu, staff@tamu.edu, student@tamu.edu, employee@tamu.edu, member@tamu.edu, affiliate@tamu.edu, alum@tamu.edu
Source: Every value in eduPersonAffiliation will have a corresponding value in eduPersonScopedAffiliation.
Conditionals governing eduPersonScopedAffiliation flag assignment
If eduPersonAffiliation contains: then eduPersonScopedAffiliation will contain:
faculty faculty@tamu.edu
staff staff@tamu.edu
student student@tamu.edu
employee employee@tamu.edu
member member@tamu.edu
affiliate affiliate@tamu.edu
alum alum@tamu.edu

Directory-specific details

LDAP eduPersonScopedAffiliation attribute properties that are dependent on directory branch or object class configuration
  Enterprise Directory
People Branch
Directory URL: ldap.tamu.edu
Object Class: eduPerson
Required: no
Indexing: none
Access: Access to Enterprise Directory restricted.
Usage: controlling access to resources
Example(s): staff@tamu.edu, employee@tamu.edu, student@tamu.edu, member@tamu.edu