Shibboleth Developers

[Scott Cantor <>]

> 3.  There is the niggling issue of where the XML 
> representation of EPPN and EPSA are specified.  I think that 
> this unfortunately requires a separate doc, which would refer 
> to eduPerson, and be referred to by the registration of the 
> URNs for these attr-defs.  Perhaps a future revision of 
> eduPerson could include this, alongside the LDAP syntax defs.

Well, while acknowledging the differences of the scoped attributes, I would 
say that all the attributes have to be documented
somewhere with regard to their SAML representation. Just knowing that the 
attribute value(s) would be pulled out as is doesn't
define things like what the AttributeNamespace would be, what the schema type 
would be, etc. One can make better assumptions in the
simple cases, but there's still defining to be done. So I don't see them as 
all that different.

> So that's my story and in my current state of mind it makes 
> as much sense as anything else, so I'm hopeful it's 
> persuasive enough that we can decide finally to go with the 
> urn:mace:dir:attribute-def URN format.

I'm inclined to stick with that format for the eduPerson attributes because I 
don't see any harm in it, it's already in the files,
and there's no real question about what the attributes are, since the names 
all include eduPerson in them. That as much as anything
argues for no further structure for those, at least.

I'm not yet convinced there's no grouping that could be done for other sets 
of attributes, though certainly not all.

Ultimately, I guess maybe I just don't think it matters all that much. I'd 
like to see DNS records put in place to resolve these
URNs to our documents so that we can build clickable registries of these, 
whatever they're called.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--