3.2.1 Identity
This object allows a system that stores network identities and/or passwords to share them with other applications through SIF. The provider of the Identity
object may only support providing an identity or a password, or it may support both.
SIF_Events are reported for this object.
Figure 3.2.1-1: Identity | Element/@Attribute | Char | Privacy Rating | Description | Type |
---|
| Identity | | High |
This object allows a system that stores network identities and/or passwords to share them with other applications through SIF. The provider of the Identity object may only support providing an identity or a password, or it may support both.
| |
@
 | RefId | M | High | The SIF RefId that uniquely identifies this object. | RefIdType |
| SIF_RefId | M | High |
The SIF RefId of a StudentPersonal, StaffPersonal, or StudentContactPersonal object.
| IdRefType |
@ | SIF_RefObject | M | High |
The type of SIF object that the SIF_RefId attribute identifies.
| values:
- StudentPersonal
- StaffPersonal
- StudentContactPersonal
|
| AuthenticationSource | M | High |
The type of source system that produced this Identity object.
See implementation notes for provider requirements. | values:
- AUAccessShibboleth
- MSActiveDirectory
- NovellNDS
- OpenDirectory
- OpenID
- Other
|
| IdentityAssertions | O | High | The list of identity assertions for this user. | IdentityAssertionsType |
| PasswordList | O | High | Allows a provider or publisher to specify the same password using multiple algorithms, if supported. | PasswordListType |
| AuthenticationSourceGlobalUID | O | High | The globally unique person identifier that links together separate Identity objects which reference the same Person. | IdRefType |
| SIF_Metadata | O | Low | | SIF_MetadataType |
| SIF_ExtendedElements | O | | Low | SIF_ExtendedElementsType |
Table 3.2.1-1: Identity
<Identity RefId="4286194F-43ED-43C1-8EE2-F0A27C4BEF86">
<SIF_RefId SIF_RefObject="StudentPersonal">23B08571-E4D6-45C3-B82A-3E52E5349925</SIF_RefId>
<AuthenticationSource>AUAccessShibboleth</AuthenticationSource>
<IdentityAssertions>
<IdentityAssertion SchemaName="eduPersonPrincipalName">john.doe@asdf.edu.au</IdentityAssertion>
</IdentityAssertions>
<AuthenticationSourceGlobalUID>A9A6CB2B-C493-4427-8C1F-D6587D448B35</AuthenticationSourceGlobalUID>
</Identity>
Example 3.2.1-1: Identity published by an Access Federation Shibboleth Provider
<Identity RefId="4286194F-43ED-43C1-8EE2-F0A27C4BEF86">
<SIF_RefId SIF_RefObject="StudentPersonal">23B08571-E4D6-45C3-B82A-3E52E5349925</SIF_RefId>
<AuthenticationSource>MSActiveDirectory</AuthenticationSource>
<IdentityAssertions>
<IdentityAssertion SchemaName="sAmAccountName">user01</IdentityAssertion>
<IdentityAssertion SchemaName="userPrincipalName">user01@asdf.edu.au</IdentityAssertion>
<IdentityAssertion SchemaName="distinguishedName">cn=User01,cn=Users,dc=org</IdentityAssertion>
</IdentityAssertions>
<AuthenticationSourceGlobalUID>23A08571-E4D6-45C3-B82A-3E52E5349925</AuthenticationSourceGlobalUID>
</Identity>
Example 3.2.1-2: Identity published by Microsoft Active Directory
<Identity RefId="4286194F-43ED-43C1-8EE2-F0A27C4BEF86">
<SIF_RefId SIF_RefObject="StudentPersonal">23B08571-E4D6-45C3-B82A-3E52E5349925</SIF_RefId>
<AuthenticationSource>OpenID</AuthenticationSource>
<IdentityAssertions>
<IdentityAssertion SchemaName="openid.identity">http://verisign.org/p/alice </IdentityAssertion>
<IdentityAssertion SchemaName="openid.server">http://verisign.org </IdentityAssertion>
</IdentityAssertions>
<AuthenticationSourceGlobalUID>A9A6CB2B-C493-4427-8C1F-D6587D448B35</AuthenticationSourceGlobalUID>
</Identity>
Example 3.2.1-3: Identity published by an OpenID provider