Ctrl+K

7. Changelog#

7.1. From version 2012-02 to version 2013-10#

  • norEduPersonNIN is changed from “mandatory” to “mandatory if a valid value exists”. Guidelines for what types of numbers that can be added to norEduPersonNIN have been changed.

  • eduPersonPrimaryAffiliation is changed from mandatory to recommended.

  • Information about organizational unit is now only mandatory for persons affiliated with a school.

  • Two new attributes have been recommended: - eduPersonScopedAffiliation - schacHomeOrganization

  • Clarifying that uid shall equal the first part of eduPersonPrincipalName (before “@”)

  • Information about eduPersonPrincipalName and which realm that can be used has been changed.

  • Document is now referring to norEdu*-specification version 1.5.1.

  • New chapter with more information about mandatory, recommended and optional attributes added (ch. 1.2).

  • Figure 1 has been updated, generalizing which attributes are mandatory, recommended and optional.

  • The language used throughout the document has updated phrasings, making it more suitable for private school owners.

  • New chapter with overview of optional attributes added to (ch. 5).

  • Changelog added to (ch. 6)

7.2. From version 2014-01 to 2015-09#

  • It is not mandatory to register information about students and teachers affiliation to basis-groups/classes and educational groups within eduPersonEntitlement

  • A new attribute is mandatory for persons that will use strong authentication: - norEduPersonAuthnMethod

  • A new attribute can be used to list which services a single person has to use strong authentication for (this is not mandatory):

    • norEduPersonServiceAuthnLevel

  • It is specified that private students shall have the value “affiliate” in the attribute eduPersonAffiliation to clarify the connection to the organization.

7.3. From version 2015-09 to 2018-03#

  • The document now refers to norEdu*-specification version 2.0.

  • It is not mandatory to register group-IDs in eduPersonEntitlement. These reflect the affiliation to basis-groups, educational groups and other groups introduced in 1.6.

  • Updated tables and examples with group-IDs.

  • Updated optional attributes to be equal to UH. l (localityName) and labeledURI have been added.

  • Added optional attributes eduPersonPrincipalNamePrior and eduPersonOrcid.

  • Updated references that was previously pointing to RFC 2141 to the newer RFC 8141.

  • Clarifying that users without NIN can in fact have a Feide user.

  • Clarifying that group information that has been registered is the current and not historical groups.

  • Clarify the usage of notes on authentication methods.

  • Clarify that Grep-codes are only mandatory for students with teachings covered by the code definition.

  • Clarify that educational groups must have Grep-codes, and that other groups can be used for groups without Grep-codes.

  • Clarify that information about educational year, educational area and program area is the sum of values that the person has with the school owner, while groups and group-IDs are connected to the school(s).

  • Clarify how norEduPersonLin can be used for county municipal ID-numbers and other local fictional national identity numbers.

  • Added section about data-processing contracts between host organizations and services.

  • Added section about services that incorrectly uses eduPersonPrincipalName as email under the mail attribute.

  • Reformatted from PDF to web-document

  • New appendix 4 added with descriptions of group-IDs.

  • Changed previously used “group identifiers” to “local group-ID” and added “group-ID” for Feide group-IDs.

  • Reformatted wide tables (collection) into one table per attribute.

  • Corrected error in example for norEduPersonAuthnMethod. Approval secret was shown unencrypted when it should be encrypted. Unencrypted values here have always been rejected by Feide.

  • Corrected error in examples for organizations and organizational units. These have the same organization number.

  • Corrected error in example for eduPersonScopedAffiliation. Added necessary variants.

On this page