From 59758cc185bc26e12e31e90cd8914ec583c453b1 Mon Sep 17 00:00:00 2001 From: wassa Date: Thu, 31 Jul 2003 20:58:56 +0000 Subject: [PATCH] Latest changes from Steven. git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@715 ab3bd59b-922f-494d-bb5f-6f0a3c29deca --- doc/InQueue.html | 60 ++++++++++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 56 insertions(+), 4 deletions(-) diff --git a/doc/InQueue.html b/doc/InQueue.html index b66c95d..1290ec7 100644 --- a/doc/InQueue.html +++ b/doc/InQueue.html @@ -187,7 +187,11 @@ completion of this period, the organization is expected to join a Federation (or some other management solution) that meets its long-term operational needs. -

+

+

By joining InQueue, an organization agrees that the Federation can list their name on the Federation web site as a member of the Federation.

+ +

In joining InQueue, an organization will make a good faith effort to maintain a web page describing their use of Shibboleth. This page will be linked from the Federation member list.

+

2.2 Data management

@@ -222,14 +226,14 @@

2.4 Attributes

The InQueue Federation specifies a set of attribute definitions to support basic - attribute-based authorization. - If a Federation member sends or receives an Attribute Assertion + attribute-based authorization.

+
    +
  1. If a Federation member sends or receives an Attribute Assertion containing the InQueue policy uri and referencing one of the listed attributes, the syntax and semantics of the associated attribute value should conform to the definitions specified in the EduPerson specification 2002/10 -

    • eduPersonPrincipalName
      • @@ -237,6 +241,53 @@
    • eduPersonAffiliation (expressed in a slightly different form via a new attribute called eduPersonScopedAffiliation)
    +
  2. If a Federation member sends or receives an Attribute Assertion + containing the InQueue policy uri and referencing one of the listed + attributes, + the syntax and semantics of the associated attribute value should + conform + to the definitions specified in the relevant IETF RFCs. + +
      +
    • cn +
    • sn +
    • telephoneNumber +
    • title +
    • initials +
    • description +
    • carLicense +
    • departmentNumber +
    • displayName +
    • employeeNumber +
    • employeeType +
    • preferredLanguage +
    • manager +
    • roomNumber +
    • seeAlso +
    • facsimileTelephoneNumber +
    • street +
    • postOfficeBox +
    • postalCode +
    • st +
    • givenName +
    • l +
    • businessCategory +
    • ou +
    • physicalDeliveryOfficeName +
    +
  3. If a Federation member sends or receives an eduPersonEntitlement Attribute Assertion + containing the InQueue policy uri and containing one of the listed + values, + the syntax and semantics of the associated attribute value should + conform + to these definitions + +
      +
    • urn:mace:incommon:entitlement:common:1 +

      The person possesses an eduPersonAffiliation value of faculty, staff, or student, or qualifies as a "library walk-in". + +

    +

3. Joining InQueue

@@ -264,6 +315,7 @@ used by InQueue, then it must be submitted in Base64-encoded DER (aka "PEM") format. +
  • (optional) Briefly describe the organization's planned uses of Shibboleth.

    To join InQueue, targets must submit a basic application to -- 1.7.10.4