Events for all Levels and InterestsStay
Jump Start Your Career GrowthStay
Get on the Higher Ed IT MapStay
Uncommon Thinking for the Common Good™Stay
Registering OIDs under eduPerson
At the University of Massachusetts we are planning the next phase of our IAM implementation using an extended user provisioning attribute set, which includes three original attributes:
However, these were never officially registered with MACE or IANA. Now we want to register OIDs for future use in federation. Several options present themselves:
1. Registering all of our attributes using the MACE domains above) means that we would not have to disable the three attributes we use internally at all six Umass campuses in AD and OpenLDAP. We would want to add the rest using the same notation. However this would require MACE cooperation and approval. Is that a reasonable idea and how would we go about this?
2. We could register as a second address below 5923 (eduPerson). What are the pros and cons?
3. We could register a University of Massachusetts node at the same level as the existing “University of Massachusetts Amherst” domain but that could create confusion. It would be called instead “University of Massachusetts” or “University of Massachusetts Central Services”.
What do other universities do within the eduPerson community?
What are the benefits of staying under that umbrella?
Thanks for your inputs.
:: Ian Stewart, Senior Identity Management Specialist
:: University Information Technology Services (UITS)