skip to primary navigationskip to content
 

Raven/Shibboleth Attribute Release Summary

This is a summary of the rules currently implemented by the University's Shibboleth Identity Provider (IdP) as provided by Raven when releasing attributes to Shibboleth Service Providers (SPs). These rules are subject to the Raven/Shibboleth Attribute Release Policy. This summary was last updated on 17 Feb 2017.

  • eduPerson Principal Name (eduPersonPrincipalName) with the value <crsid>@cam.ac.uk to any SP that requests it on behalf of anyone with a Raven account.
  • An apropriate Anonymous Identifier (eduPersonTargetedID), to any SP that requests it providing Raven holds sufficient metadata to authenticate the SPs request, on behalf of anyone with a Raven account.
  • Status(eduPersonScopedAffiliation) to any SP that requests it:
    • with the value member@cam.ac.uk on behalf of anyone who appears in lookup.
    • with the value member@eresources.lib.cam.ac.uk on behalf of anyone entitled to access the general University Library electronic resource collection.
  • Entitlement(eduPersonEntitlement):
    • to any SP that requests it:
      • a value of urn:mace:dir:entitlement:common-lib-terms on behalf of anyone entitled to access the general University Library electronic resource collection.
    • to EDINA Film&Sound online:
      • a value of urn:mace:ac.uk:sdss.ac.uk:entitlement:emol.sdss.ac.uk:restricted on behalf of anyone entitled to access University Library electronic resource that are 'medically restricted'.
    • to OCLC FirstSearch:
      • a value of urn:mace:oclc.org:100159623 on behalf of anyone entitled to access the general University Library electronic resource collection.
  • CRSid (uid) to SPs operated by the University.
  • Surname (sn), Registered name (cn), Display name (displayName), Role(s) (title), Institution name(s) (ou), Institution ID(s) (instID), Primary institution ID (jdInst), Email address (mail), Alternative email address(es) (mailAlternative), University status(es) (misAffiliation), lookup group title(s) (groupTitle), lookup group ID(s) (groupID), with values derived from lookup (subject to each user's choice of suppression) for anyone who appears in lookup to SPs operated by the University.
  • Surname (sn), initials (initials, derived from Registered name), and  Email address (mail) to Gartner, Inc. and Room Booking Systems Ltd (20-23 Woodside Place, Glasgow. SC366647).
  • CRSid ('uid'), Surname (sn), initials (initials, derived from Registered name), Forename (when
    available) and Email Address ('mail') to Qualtrics LLC (https://www.qualtrics.com/).
  • Surname (sn), initials (initials, derived from Registered name), Email address (mail) and Institution name(s) ('ou') to Wellspring Worldwide, Inc. (350 N. LaSalle Street 12th Floor, Chicago, IL 60654).

University Library electronic resources

  • People entitled to access the general University Library electronic resource collection consist of anyone who is not a member of lookup group 100925, and who has a misStatus in lookup of 'staff' or 'student' or who is a member of lookup group 100981 (staff) or 100982 (students).
  • University Library electronic resources that are restricted to staff can be accessed by anyone who is not members of lookup group 100925, and who has a misStatus in lookup of 'staff' or who is in lookup group 100981.
  • University Library electronic resources that are 'medically restricted' can be accessed by anyone who is not members of lookup group 100925 and who is a member of lookup group 100927.

Anyone who is having problems with access to University Library electronic resources should contact lib-raven@lists.cam.ac.uk