UCSC urn:mace:ucsc.edu registry

You may need to scroll right to see all the columns.

Atrributes available in Shibboleth integrations.

Column one has the Uniform Resource Name, and other columns have the description, related LDAP attribute, and sample data.

Uniform Resource Name (URN) Description Related LDAP Attribute

Sample Data

urn:mace:ucsc.edu:metadata:attr:profile Metadata attribute extension name
urn:mace:ucsc.edu:metadata:attr:profile:legacy-sha1 Force the use of sha-1 signatures
urn:mace:ucsc.edu:metadata:attr:profile:registered-app Suppress the user consent page when logging into locally managed SP
urn:mace:ucsc.edu:metadata:attr:profile:req-enc-optional Bypass the SAML request encryption requirement to support SP vendors that don't support it. Does not include InCommon relying parties
urn:mace:ucsc.edu:metadata:attr:profile:unencrypted-assertion This is used for SPs that don't know how to receive an encrypted assertion. Does not include InCommon relying parties
eduPersonPrincipalName (EPPN) - has no local URN cruzid@ucsc.edu = user account. Included in all integrations by default. eduPersonPrincipalName sslug@ucsc.edu
mail - has no local URN Campus email address. For most users, this has the same value as EPPN. Included in all integrations by default. mail sslug@ucsc.edu
urn:mace:ucsc.edu:metadata:attr:filter:edu:affiliation Affiliation replaces default InCommon scoped affiliation, Internet2 source eduPersonAffiliation. Included in all integrations by default. eduPersonAffiliation student | employee | faculty | member | affiliate

(Students, employees, faculty, Sundry-Staged and Sundry-Auto users are "Member", all other Sundry types are "Affiliate")
urn:mace:ucsc.edu:metadata:attr:filter:edu:scoped-affiliation Scoped affiliation replaces default unscoped affiliation, Internet2 source eduPersonScopedAffiliation eduPersonAffiliation w/ @ucsc.edu student@ucsc.edu, member@ucsc.edu
urn:mace:ucsc.edu:metadata:attr:filter:common-name Concatenated first and last name of authenticated subject ucscPersonOfficialCn

Sammy The Slug

urn:mace:ucsc.edu:metadata:attr:filter:display-name Display Name of the user may be redacted based on internal rules. This is "what the user wants to be called." It does not obfuscate data for NRIs. Campus directory name. displayName Sammy Slug
urn:mace:ucsc.edu:metadata:attr:filter:given-name First name of authenticated subject ucscPersonOfficialGivenName Sammy
urn:mace:ucsc.edu:metadata:attr:filter:surname Last name of authenticated subject ucscPersonOfficialSn Slug
urn:mace:ucsc.edu:metadata:attr:filter:unfederated-id For applications that can't use a federated ID and need username directly; use should be avoided. Instead of sending EPPN sends UID. uid sslug
urn:mace:ucsc.edu:metadata:attr:filter:uc:campus-id-short UC-Trust Short campus ID: an ID for an employee UCOP doesn't know about, set by the campus for volunteers. derived using uid

SCslug

 

urn:mace:ucsc.edu:metadata:attr:filter:uc:employee-id UC Campus Employee ID. This single-valued attribute contains the nine-digit employee ID (including leading zeros), as defined by the University's Payroll/Personnel System (PPS) and issued by this IdP's campus, qualified by the campus's top domain name provided to InCommon. For example, 012345678@ucsc.edu would be the value for employee ID 012345678 at UCSC. ucscPersonPpsEidNumber 7########@ucsc.edu
urn:mace:ucsc.edu:metadata:attr:filter:uc:net-id UC-Trust NetID. Used only for cross employment University of California Applications ucscPersonNetID ######
urn:mace:ucsc.edu:metadata:attr:filter:uc:student-id UC-Trust Student system ID. AIS EMPLID + '@ucsc.edu' ucscPersonAisIdNumber #######@ucsc.edu
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:divdata-id UCSC sourced Div Data ID Number ucscPersonDivIdNumber #### or #####
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:guid UCSC Global Identifier ucscPersonGuid G#########
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:oprid UCSC Academic Information System OprID ucscPersonAisOprID W####### or #######
urn:mace:ucsc.edu:metadata:attr:filter:uc:assurance-basic UC-Trust Basic assurance, only released for Faculty and Employees [not in LDAP]
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:active-resources UCSC system resource list ucscPersonActiveResource AIS | CruzIdGold | CruzIdBlue | Google ...and more
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:department-code UCSC sourced department code ucscPersonEmployeeDepartmentCode

002710

urn:mace:ucsc.edu:metadata:attr:filter:ucsc:department-name UCSC sourced department name ucscPersonEmployeeDepartment ITS APM Academic Applications
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:primary-working-title UCSC sourced primary working title ucscPersonPpsPrimaryWorkingTitle INFO SYS ANL 4
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:pub-affiliation UCSC institution specific public affiliation
urn:mace:ucsc.edu:metadata:attr:filter:ucsc:ismemberof:grpr UCSC extracted memberof attributes for Campus Groups isMemberOf + additional filters manually coded (Campus Groups)