LDAP/schema scoped affiliations

The term "Scoped Affiliation" is used to reference a value that takes the form role@institution. For example, staff@case.edu, student@case.edu, employee@med.case.edu, alum@cim.edu, etc. They are an easy, normalized, short hand form to represent how a given individual is affiliated with an organization such as the University or it's affiliated organizations like Cleveland Institute of Art, Cleveland Institute of Music, Cleveland Museum of Art, University Hospitals.

There are three LDAP attributes in the schema that contain scoped affiliations values:

  • eduPersonScopedAffiliation -- this can hold one of seven values in the "role" position (affiliate, alum, employee, faculty, member, staff, student). At Case, this will hold zero or more of these values for a given individual. They only refer to active associations with the University.
  • cwruEduPersonScopedAffiliation -- this is a super-set of eduPersonScopedAffiliation. In this attribute, all values that appear in a given person's eduPersonScopedAffiliation attribute will appear. In addition, there are numerous non-standard values that we use as "roles" such as researcher@case.edu, contractor@case.edu, preadmit@case.edu, admit@case.edu, etc. In addition to those, the values in this attribute possess a 6 month grace period. While eduPersonScopedAffiliation only has active values in for a given person, this one will persist any given value for 6 months after that association has seemingly gone away. For example, a person who is a student who graduates from the University will have thier student@case.edu value disappear from eduPersonScopedAffiliation; but it will remain as a value in cwruEduPersonScopedAffiliation for the next 6 months. This is to allow person's Level of IT Services associated with that affiliation with the University persist for a grace period.
  • cwruEduPersonScopedAffiliationExpiration -- this is a super-set of cwruEduPersonScopedAffiliation. It will contain all of the values in cwruEduPersonScopedAffiliation. Also, the data in each value is slightly structured to include a date. The role@organization has a comma and a date stamp appended to it. The datestamp indicates when that affiliation's grace period will end and thus, will disappear. The date stamp is the 4 digit year followed by the 2 digit month followed by the 2 digit day. For example, student@case.edu,20080515; which means that that person's student@case.edu association with the University will expire on May 15, 2008. Also, cwruEduPersonScopedAffiliationExpiration contains a history of all of a given person's associations with the University. That is, you may see values in the attribute that have already expired.
This page has been accessed 3,028 times.
This page was last modified 15:07, December 8, 2005 by Gregory Szorc.
About | Disclaimers