Introduction

The auEduPersonSharedToken attribute is a unique identifier that permits identifying a user across federation spanning services such as Grid and Repositories. A set formula generates a unique single-value per user when necessary. The eduPersonTargetedID attribute is a more appropriate, privacy-preserving attribute.


Details

The AAF has found that several service providers are using, or have made a request to use, auEduPersonSharedToken attribute for services other than its intended purpose. By design, this is problematic because auEduPersonSharedToken does not preserve a user's privacy between services.


The AAF is restricting access to the auEduPersonSharedToken and will review requests for its use. The AAF wishes to encourage services to use the more suitable eduPersonTargetedID attribute, which is the preferred per-service unique identifier.


If a service requires the auEduPersonSharedToken attribute, please contact support@aaf.edu.au, and a review of your use case will occur.

 

Links

AAF attributes: https://support.aaf.edu.au/support/solutions/folders/19000156050

auEduPersonSharedToken: https://support.aafedu.au/support/solutions/articles/19000052500

eduPersonTargetedID: https://aaf.freshdesk.com/a/solutions/articles/19000052509