7. Changelog#
7.1. From version 2012-02 to version 2013-10#
norEduPersonNIN
is changed from “mandatory” to “mandatory if a valid value exists”. Guidelines for what types of numbers that can be added tonorEduPersonNIN
have been changed.eduPersonPrimaryAffiliation
is changed from mandatory to recommended.Information about organizational unit is now only mandatory for persons affiliated with a school.
Two new attributes have been recommended: -
eduPersonScopedAffiliation
-schacHomeOrganization
Clarifying that
uid
shall equal the first part ofeduPersonPrincipalName
(before “@”)Information about
eduPersonPrincipalName
and which realm that can be used has been changed.Document is now referring to norEdu*-specification version 1.5.1.
New chapter with more information about mandatory, recommended and optional attributes added (ch. 1.2).
Figure 1 has been updated, generalizing which attributes are mandatory, recommended and optional.
The language used throughout the document has updated phrasings, making it more suitable for private school owners.
New chapter with overview of optional attributes added to (ch. 5).
Changelog added to (ch. 6)
7.2. From version 2014-01 to 2015-09#
It is not mandatory to register information about students and teachers affiliation to basis-groups/classes and teaching groups within
eduPersonEntitlement
A new attribute is mandatory for persons that will use strong authentication: -
norEduPersonAuthnMethod
A new attribute can be used to list which services a single person has to use strong authentication for (this is not mandatory):
norEduPersonServiceAuthnLevel
It is specified that private students shall have the value “affiliate” in the attribute
eduPersonAffiliation
to clarify the connection to the organization.
7.3. From version 2015-09 to 2018-03#
The document now refers to norEdu*-specification version 2.0.
It is not mandatory to register group-IDs in
eduPersonEntitlement
. These reflect the affiliation to basis-groups, teaching groups and other groups introduced in 1.6.Updated tables and examples with group-IDs.
Updated optional attributes to be equal to UH.
l
(localityName
) andlabeledURI
have been added.Added optional attributes
eduPersonPrincipalNamePrior
andeduPersonOrcid
.Updated references that was previously pointing to RFC 2141 to the newer RFC 8141.
Clarifying that users without NIN can in fact have a Feide user.
Clarifying that group information that has been registered is the current and not historical groups.
Clarify the usage of notes on authentication methods.
Clarify that Grep-codes are only mandatory for students with teachings covered by the code definition.
Clarify that teaching groups must have Grep-codes, and that other groups can be used for groups without Grep-codes.
Clarify that information about educational year, educational area and program area is the sum of values that the person has with the school owner, while groups and group-IDs are connected to the school(s).
Clarify how
norEduPersonLin
can be used for county municipal ID-numbers and other local fictional national identity numbers.Added section about data-processing contracts between host organizations and services.
Added section about services that incorrectly uses
eduPersonPrincipalName
as email under themail
attribute.Reformatted from PDF to web-document
New appendix 4 added with descriptions of group-IDs.
Changed previously used “group identifiers” to “local group-ID” and added “group-ID” for Feide group-IDs.
Reformatted wide tables (collection) into one table per attribute.
Corrected error in example for
norEduPersonAuthnMethod
. Approval secret was shown unencrypted when it should be encrypted. Unencrypted values here have always been rejected by Feide.Corrected error in examples for organizations and organizational units. These have the same organization number.
Corrected error in example for
eduPersonScopedAffiliation
. Added necessary variants.