The Shibboleth V1 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only.
EduPersonPrincipalName
An identifier attribute defined by the eduPerson specification, it is commonly thought of as the global equivalent of a "netid" or "username" that is typically found in local enterprise authentication systems.
An EduPersonPrincipalName typically resembles an e-mail address, formed by appending a domain "scope" to a locally unique identifier, separated by the @ sign.
Federated applications might rely on EduPersonPrincipalName when controlling access to resources in a finely grained manner or when linking local application accounts or records. Caution should be used, however, because EduPersonPrincipalName values may change or can even be reassigned at times.
%COMMENT%